CVE-2022-37327

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-10 · updated 2026-06-17
Weakness: CWE-20

Description

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

Affected products

Intel Cm11Ebc4W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Cm11Ebi38W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Cm11Ebi58W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Cm11Ebi716W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Cm8Ccb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I3Cb4N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I5Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I7Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8Pcb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Elm12Hbc Firmware: before hbadl357.0052 — fixed in hbadl357.0052
Intel Elm12Hbi3 Firmware: before hbadl357.0052 — fixed in hbadl357.0052
Intel Elm12Hbi5 Firmware: before hbadl357.0052 — fixed in hbadl357.0052
Intel Elm12Hbi7 Firmware: before hbadl357.0052 — fixed in hbadl357.0052
Intel Lapac71G Firmware: before acadl357.0059 — fixed in acadl357.0059
Intel Lapac71H Firmware: before acadl357.0059 — fixed in acadl357.0059
Intel Lapbc510 Firmware: before bctgl357.0078 — fixed in bctgl357.0078
Intel Lapbc710 Firmware: before bctgl357.0078 — fixed in bctgl357.0078
Intel Lapkc51E Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Lapkc71E Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Lapkc71F Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Laprc510 Firmware: before rcadl357.0060 — fixed in rcadl357.0060
Intel Laprc710 Firmware: before rcadl357.0060 — fixed in rcadl357.0060
Intel Nuc10I3Fnh Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhf Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhfa Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhja Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnk Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnkn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnh Firmware: before fncml357.0059 — fixed in fncml357.0059

How to fix

Upgrade to a fixed version: Intel Cm11Ebc4W Firmware ebtgl357.0071; Intel Cm11Ebi38W Firmware ebtgl357.0071; Intel Cm11Ebi58W Firmware ebtgl357.0071; Intel Cm11Ebi716W Firmware ebtgl357.0071; Intel Cm8Ccb4R Firmware cbwhl357.0101; Intel Cm8I3Cb4N Firmware cbwhl357.0101; Intel Cm8I5Cb8N Firmware cbwhl357.0101; Intel Cm8I7Cb8N Firmware cbwhl357.0101; Intel Cm8Pcb4R Firmware cbwhl357.0101; Intel Elm12Hbc Firmware hbadl357.0052; Intel Elm12Hbi3 Firmware hbadl357.0052; Intel Elm12Hbi5 Firmware hbadl357.0052. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-37327 or the next vulnerability affects your stack