Information Disclosure Risk in Intel NUC BIOS Firmware
CVE-2023-22356

6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc BiOS Firmware
Vendor
CVE Published:
11 August 2023

What is CVE-2023-22356?

Improper initialization in specific Intel NUC BIOS firmware could enable a privileged user to potentially disclose sensitive information through local access. This vulnerability highlights the importance of ensuring that firmware configurations are appropriately set to mitigate risks associated with unauthorized data access.

Affected Version(s)

Intel(R) NUC BIOS firmware See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.