Improper Input Validation in Intel NUC BIOS Firmware
CVE-2023-34086

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Nuc BiOS Firmware
Vendor
CVE Published:
11 August 2023

What is CVE-2023-34086?

Improper input validation present in certain Intel(R) NUC BIOS firmware versions may enable a privileged user to potentially escalate privileges through local access. This vulnerability highlights the importance of robust validation mechanisms in firmware to prevent unauthorized access and exploitation.

Affected Version(s)

Intel(R) NUC BIOS firmware See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.