Sensitive Information Exposure in Intel NUC BIOS Firmware
CVE-2023-29500

5.3MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nucs
Vendor
CVE Published:
11 August 2023

What is CVE-2023-29500?

Certain configurations of Intel NUC BIOS firmware expose sensitive information to unauthorized users. This vulnerability allows a privileged user with local access to potentially enable information disclosure, posing risks to the integrity and confidentiality of data. Organizations using affected Intel NUC models should review their BIOS configurations and apply recommended security patches to mitigate this exposure.

Affected Version(s)

Intel(R) NUCs See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.