6.7
Medium
CVE-2022-27229 Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before…
Description
Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software | Versions not published | |
| nuc_hdmi_firmware_update_tool 1.79 | earliest → < 1.79.1.1 | 1.79.1.1 |
| nuc_kit_nuc7i3dnhe | Versions not published | |
| nuc_kit_nuc7i3dnke | Versions not published | |
| nuc_kit_nuc7i5dnhe | Versions not published | |
| nuc_kit_nuc7i5dnke | Versions not published | |
| nuc_kit_nuc7i7dnhe | Versions not published | |
| nuc_kit_nuc7i7dnke | Versions not published |