Improper Access Control in Intel NUC BIOS Firmware
CVE-2023-32285

6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc BiOS Firmware
Vendor
CVE Published:
11 August 2023

What is CVE-2023-32285?

The vulnerability involves improper access control within some versions of Intel NUC BIOS firmware. This flaw may allow a privileged user to gain unauthorized access, potentially leading to a denial of service situation through local access. Users of affected Intel NUC systems should review their firmware version and apply any available updates to mitigate this risk. More details can be found in Intel's advisory.

Affected Version(s)

Intel(R) NUC BIOS firmware See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.