CVE-2022-36339: Intel CM11EBC4W Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Affected products

• Intel CM11EBC4W Firmware: before ebtgl357.0071 (fixed in ebtgl357.0071)
• Intel CM11EBI38W Firmware: before ebtgl357.0071 (fixed in ebtgl357.0071)
• Intel CM11EBI58W Firmware: before ebtgl357.0071 (fixed in ebtgl357.0071)
• Intel CM11EBI716W Firmware: before ebtgl357.0071 (fixed in ebtgl357.0071)
• Intel CM8CCB4R Firmware: before cbwhl357.0101 (fixed in cbwhl357.0101)
• Intel CM8I3CB4N Firmware: before cbwhl357.0101 (fixed in cbwhl357.0101)
• Intel CM8I5CB8N Firmware: before cbwhl357.0101 (fixed in cbwhl357.0101)
• Intel CM8I7CB8N Firmware: before cbwhl357.0101 (fixed in cbwhl357.0101)
• Intel CM8PCB4R Firmware: before cbwhl357.0101 (fixed in cbwhl357.0101)
• Intel ELM12HBC Firmware: before hbadl357.0052 (fixed in hbadl357.0052)
• Intel ELM12HBI3 Firmware: before hbadl357.0052 (fixed in hbadl357.0052)
• Intel ELM12HBI5 Firmware: before hbadl357.0052 (fixed in hbadl357.0052)
• Intel ELM12HBI7 Firmware: before hbadl357.0052 (fixed in hbadl357.0052)

Published 2023-05-10. Last modified 2026-06-17.