Privilege Escalation Vulnerability in Intel NUC BIOS Firmware
CVE-2023-29495

7.8HIGH

Key Information:

Vendor
Intel
Status
Intel NUC BIOS firmware
Vendor
CVE Published:
19 January 2024

Summary

The vulnerability arises from improper input validation in Intel NUC BIOS firmware, which could enable a privileged user to escalate their privileges through local access. This flaw affects systems running versions prior to the release of IN0048, necessitating immediate remediation to safeguard against potential exploitation. Users are urged to update to the latest BIOS version to mitigate the risks associated with this issue.

Affected Version(s)

Intel NUC BIOS firmware before version IN0048

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.