Improper Access Control in Intel NUC BIOS Firmware
CVE-2023-25771

5.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc BiOS Firmware
Vendor
CVE Published:
10 May 2023

What is CVE-2023-25771?

Certain Intel NUC BIOS firmware versions are susceptible to an improper access control issue, which may permit a privileged user to potentially trigger a denial of service attack through local access. This vulnerability highlights the importance of securing BIOS configurations to mitigate unauthorized local access and maintain system integrity.

Affected Version(s)

Intel(R) NUC BIOS firmware See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.