CVE-2022-36789

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-11 · updated 2026-06-17
Weakness: CWE-284

Description

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Nuc 10 Performance Kit Nuc10I3Fnh Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I3Fnhf Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I3Fnhn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I3Fnk Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I3Fnkn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnh Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnhf Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnhj Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnhn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnk Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnkn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I5Fnkp Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnh Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnhc Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnhn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnk Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnkn Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Kit Nuc10I7Fnkp Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I3Fnhfa Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I3Fnhja Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I5Fnhca Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I5Fnhja Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I5Fnkpa Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I7Fnhaa Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I7Fnhja Firmware: before fncml357.0053 — fixed in fncml357.0053
Intel Nuc 10 Performance Mini Pc Nuc10I7Fnkpa Firmware: before fncml357.0053 — fixed in fncml357.0053

How to fix

Upgrade to a fixed version: Intel Nuc 10 Performance Kit Nuc10I3Fnh Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I3Fnhf Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I3Fnhn Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I3Fnk Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I3Fnkn Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnh Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnhf Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnhj Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnhn Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnk Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnkn Firmware fncml357.0053; Intel Nuc 10 Performance Kit Nuc10I5Fnkp Firmware fncml357.0053. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-36789 or the next vulnerability affects your stack