CVE-2022-21794: Intel Nuc 8 Business NUC8I7HNKQC Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Nuc 8 Business NUC8I7HNKQC Firmware: before hn0067 (fixed in hn0067)
• Intel Nuc 8 Enthusiast NUC8I7HVKVA Firmware: before hn0067 (fixed in hn0067)
• Intel Nuc 8 Enthusiast NUC8I7HVKVAW Firmware: before hn0067 (fixed in hn0067)
• Intel Nuc Kit NUC8I7HNK Firmware: before hn0067 (fixed in hn0067)
• Intel Nuc Kit NUC8I7HVK Firmware: before hn0067 (fixed in hn0067)

Published 2022-11-11. Last modified 2026-06-17.