🛡️ CVE-2022-21237 — lapbc510-firmware

🟡 CVSS 6.7 — Medium ✅ No Known Exploit CWE-119 NVD
6.7
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs administrative privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity high, availability high.

Weakness class

CVE-2022-21237 is classified as CWE-119: Improper Restriction of Operations within Memory Buffer Bounds. A read or write is performed without confirming it stays inside the allocated buffer, corrupting adjacent memory.

Affected software

CVE-2022-21237 is recorded against 59 packages.

  • lapbc510-firmware (fixed in bctgl357.0065)
  • lapbc710-firmware (fixed in bctgl357.0065)
  • lapkc51e-firmware (fixed in kctgl357.0040)
  • lapkc71e-firmware (fixed in kctgl357.0040)
  • lapkc71f-firmware (fixed in kctgl357.0040)
  • nuc-11-compute-element-cm11ebc4w-firmware (fixed in ebtgl357.0057)
  • nuc-11-compute-element-cm11ebi38w-firmware (fixed in ebtgl357.0057)
  • nuc-11-compute-element-cm11ebi58w-firmware (fixed in ebtgl357.0057)
  • nuc-11-compute-element-cm11ebi716w-firmware (fixed in ebtgl357.0057)
  • nuc-11-enthusiast-kit-nuc11phki7c-firmware (fixed in phtgl579.0064)
  • nuc-11-enthusiast-mini-pc-nuc11phki7caa-firmware (fixed in phtgl579.0064)
  • nuc-11-pro-board-nuc11tnbi3-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-board-nuc11tnbi30z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-board-nuc11tnbi5-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-board-nuc11tnbi50z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-board-nuc11tnbi7-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-board-nuc11tnbi70z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi3-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi30l-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi30p-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi30z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi5-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi50l-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi50w-firmware (fixed in tntgl357.0059)
Show the remaining 35 packages
  • nuc-11-pro-kit-nuc11tnhi50z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi7-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi70l-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi70q-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnhi70z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki3-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki30z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki5-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki50z-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki7-firmware (fixed in tntgl357.0059)
  • nuc-11-pro-kit-nuc11tnki70z-firmware (fixed in tntgl357.0059)
  • nuc-8-compute-element-cm8ccb-firmware (fixed in cbwhl.0095)
  • nuc-8-compute-element-cm8i3cb-firmware (fixed in cbwhl.0095)
  • nuc-8-compute-element-cm8i5cb-firmware (fixed in cbwhl.0095)
  • nuc-8-compute-element-cm8i7cb-firmware (fixed in cbwhl.0095)
  • nuc-8-compute-element-cm8pcb-firmware (fixed in cbwhl.0095)
  • nuc-9-pro-compute-element-nuc9v7qnb-firmware (fixed in qncflx70.0064)
  • nuc-9-pro-compute-element-nuc9vxqnb-firmware (fixed in qncflx70.0064)
  • nuc-9-pro-kit-nuc9v7qnx-firmware (fixed in qncflx70.0064)
  • nuc-9-pro-kit-nuc9vxqnx-firmware (fixed in qncflx70.0064)
  • nuc-kit-nuc8i3b-firmware (fixed in becfl357.0089)
  • nuc-kit-nuc8i5be-firmware (fixed in becfl357.0089)
  • nuc-kit-nuc8i7be-firmware (fixed in becfl357.0089)
  • nuc11btmi7-firmware (fixed in dbtgl579.0055)
  • nuc11btmi9-firmware (fixed in dbtgl579.0055)
  • nuc11dbbi7-firmware (fixed in dbtgl579.0055)
  • nuc11dbbi9-firmware (fixed in dbtgl579.0055)
  • nuc11pa-firmware (fixed in patgl357.0042)
  • nuc11pah-firmware (fixed in patgl357.0042)
  • nuc11paq-firmware (fixed in patgl357.0042)
  • nuc8i3cysm-firmware (fixed in cycnli35.86a.0050)
  • nuc8i3cysn-firmware (fixed in cycnli35.86a.0050)
  • nuc9i5qn-firmware (fixed in qxcfl579.0064)
  • nuc9i7qn-firmware (fixed in qxcfl579.0064)
  • nuc9i9qn-firmware (fixed in qxcfl579.0064)

Timeline and source

Published on 12 May 2022 and last revised on 17 June 2026. No public exploit is currently recorded for this entry. A vendor advisory or fix has been published. Record sourced from NVD.

References

www.intel.com
www.intel.com

Details

Severity MEDIUM
CVSS Score 6.7
CVSS Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE CWE-119
Public Exploit ✅ No
Source NVD
Published 2022-05-12
Updated 2026-08-11
Modified 2026-06-17

Affected Packages

Software From version Fixed in
lapbc510-firmware bctgl357.0065
lapbc710-firmware bctgl357.0065
lapkc51e-firmware kctgl357.0040
lapkc71e-firmware kctgl357.0040
lapkc71f-firmware kctgl357.0040
nuc-11-compute-element-cm11ebc4w-firmware ebtgl357.0057
nuc-11-compute-element-cm11ebi38w-firmware ebtgl357.0057
nuc-11-compute-element-cm11ebi58w-firmware ebtgl357.0057
nuc-11-compute-element-cm11ebi716w-firmware ebtgl357.0057
nuc-11-enthusiast-kit-nuc11phki7c-firmware phtgl579.0064
nuc-11-enthusiast-mini-pc-nuc11phki7caa-firmware phtgl579.0064
nuc-11-pro-board-nuc11tnbi3-firmware tntgl357.0059
nuc-11-pro-board-nuc11tnbi30z-firmware tntgl357.0059
nuc-11-pro-board-nuc11tnbi5-firmware tntgl357.0059
nuc-11-pro-board-nuc11tnbi50z-firmware tntgl357.0059
nuc-11-pro-board-nuc11tnbi7-firmware tntgl357.0059
nuc-11-pro-board-nuc11tnbi70z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi3-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi30l-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi30p-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi30z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi5-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi50l-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi50w-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi50z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi7-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi70l-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi70q-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnhi70z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki3-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki30z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki5-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki50z-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki7-firmware tntgl357.0059
nuc-11-pro-kit-nuc11tnki70z-firmware tntgl357.0059
nuc-8-compute-element-cm8ccb-firmware cbwhl.0095
nuc-8-compute-element-cm8i3cb-firmware cbwhl.0095
nuc-8-compute-element-cm8i5cb-firmware cbwhl.0095
nuc-8-compute-element-cm8i7cb-firmware cbwhl.0095
nuc-8-compute-element-cm8pcb-firmware cbwhl.0095
nuc-9-pro-compute-element-nuc9v7qnb-firmware qncflx70.0064
nuc-9-pro-compute-element-nuc9vxqnb-firmware qncflx70.0064
nuc-9-pro-kit-nuc9v7qnx-firmware qncflx70.0064
nuc-9-pro-kit-nuc9vxqnx-firmware qncflx70.0064
nuc-kit-nuc8i3b-firmware becfl357.0089
nuc-kit-nuc8i5be-firmware becfl357.0089
nuc-kit-nuc8i7be-firmware becfl357.0089
nuc11btmi7-firmware dbtgl579.0055
nuc11btmi9-firmware dbtgl579.0055
nuc11dbbi7-firmware dbtgl579.0055
nuc11dbbi9-firmware dbtgl579.0055
nuc11pa-firmware patgl357.0042
nuc11pah-firmware patgl357.0042
nuc11paq-firmware patgl357.0042
nuc8i3cysm-firmware cycnli35.86a.0050
nuc8i3cysn-firmware cycnli35.86a.0050
nuc9i5qn-firmware qxcfl579.0064
nuc9i7qn-firmware qxcfl579.0064
nuc9i9qn-firmware qxcfl579.0064

Similar Threats

Vulnerability Monitoring

Track new vulnerabilities in lapbc510-firmware

CVE-2022-21237 is rated CVSS 6.7 Medium. BotEraser monitors your WordPress installation and notifies you when software you use appears in our vulnerability database.

Set Up Free Alerts →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.