© 2026 vulntracker.io

CVE-2022-37345

HIGH

7.8

CVSS Score

Published: November 11, 2022 at 03:48 PM UTC

Updated: June 17, 2026 at 04:54 AM UTC

17 products affected across 1 vendorNuc Kit NUC5I7RYH FirmwareNuc Kit NUC5I3RYHS FirmwareNuc Kit NUC5I5RYHS Firmware

Using Intel(R) NUC Kits by N/A?

Get instant alerts when new vulnerabilities affect Intel(R) NUC Kits - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nuc Kit NUC5I3RYH Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i3ryh (same device)

Nuc Kit NUC5I3RYHS Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i3ryhs (same device)

Nuc Kit NUC5I3RYHSN Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i3ryhsn (same device)

Nuc Kit NUC5I3RYK Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i3ryk (same device)

Nuc Kit NUC5I5RYH Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i5ryh (same device)

Nuc Kit NUC5I5RYHS Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i5ryhs (same device)

Nuc Kit NUC5I5RYK Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i5ryk (same device)

Nuc Kit NUC5I7RYH Firmware · Intel

95%

v < ry0386

Affected range stops below ry0386, so it looks safe — our inference, not a vendor statement

intel-nuc-kit-nuc5i7ryh (same device)

60%

v < RY0386

Affected range stops below RY0386, so it looks safe — our inference, not a vendor statement

Nuc Kit Nuc5I3Ryh · Inteldevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

References (1)

PatchVendor Advisory

Source: [email protected]

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHintel

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-287

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card