CVE-2022-35276: Intel Nuc 8 Compute Element CM8CCB Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

  • Intel Nuc 8 Compute Element CM8CCB Firmware: before cbwhl357.0096 (fixed in cbwhl357.0096)
  • Intel Nuc 8 Compute Element CM8I3CB Firmware: before cbwhl357.0096 (fixed in cbwhl357.0096)
  • Intel Nuc 8 Compute Element CM8I5CB Firmware: before cbwhl357.0096 (fixed in cbwhl357.0096)
  • Intel Nuc 8 Compute Element CM8I7CB Firmware: before cbwhl357.0096 (fixed in cbwhl357.0096)
  • Intel Nuc 8 Compute Element CM8PCB Firmware: before cbwhl357.0096 (fixed in cbwhl357.0096)

Published 2022-11-11. Last modified 2026-06-17.