CVE-2022-32577

LOW

Intel NUC 5CPYH/5PGYH/5PPYH Firmware < PY0081 - DoS or Info Disclosure via BIOS Input Validation

Title source: llm

Description

Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access

References (1)

Core 1

Core References

Patch, Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Scores

CVSS v3 3.4

EPSS 0.0013

EPSS Percentile 31.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (3)

intel/nuc5cpyh_firmware < py0081

intel/nuc5pgyh_firmware < py0081

intel/nuc5ppyh_firmware < py0081

Published May 10, 2023

Tracked Since Feb 18, 2026