Medium severity6.7NVD Advisory· Published May 10, 2023· Updated Jun 17, 2026

CVE-2022-38101

Description

Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Intel/Iflashv
cpe:2.3:a:intel:iflashv:*:*:*:*:*:windows:*:*
Range: <5.13.00.2105
Intel/NUC Chaco Canyon BIOS update softwaredescription
Intel/NUC Chaco Canyon BIOS update softwarellm-fuzzy
Range: <iFlashV Windows 5.13.00.2105

Patches

Vulnerability mechanics

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000