{"id":"CVE-2022-36349","state":"PUBLISHED","title":"Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially ","description":"Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access.","publishedAt":"2022-11-11T15:48:55.398Z","updatedAt":"2024-08-03T10:00:04.279Z","severity":{"score":5.2,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","source":"intel"},"assigner":"intel","products":["n/a Intel(R) NUC Boards and Intel(R) NUC Kits"],"affected":[{"vendor":"n/a","product":"Intel(R) NUC Boards and Intel(R) NUC Kits","defaultStatus":"unaffected","versions":[{"version":"before version MYi30060","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:21.136Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/36xxx/CVE-2022-36349.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-36349","state":"PUBLISHED","datePublished":"2022-11-11T15:48:55.398Z","dateUpdated":"2024-08-03T10:00:04.279Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","requesterUserId":"e1538295-92a9-4bd5-bb63-88a76fc3a35c","dateReserved":"2022-07-28T03:00:22.224Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) NUC Boards and Intel(R) NUC Kits","defaultStatus":"unaffected","versions":[{"version":"before version MYi30060","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":5.2,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2022-11-14T17:46:24.847Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T10:00:04.279Z"}}]}}}