CVE-2022-40971

HIGH 7.8CVE-2022-40971 · Published 10/05/2023 · updated 17/06/2026

In short

CVE-2022-40971 is a HIGH (CVSS 7.8) vulnerability affecting nuc hdmi firmware update tool (intel).
Chance of exploitation in the next 30 days (EPSS): 0.15%, higher than 4.0% of all vulnerabilities.
Fix: update to 1.79.1.1 or later.

Package	Affected versions	Patched versions
nuc hdmi firmware update tool intel	`< 1.79.1.1`	`1.79.1.1`

Description

Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00833.html · Patch

More vulnerabilities in nuc hdmi firmware update tool

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free