Improper Input Validation in Intel NUC BIOS Firmware
CVE-2023-38587

7.8HIGH

Key Information:

Vendor
Intel
Status
Intel NUC BIOS firmware
Vendor
CVE Published:
19 January 2024

Summary

Improper input validation in certain versions of Intel NUC BIOS firmware may allow a privileged user with local access to exploit the vulnerability. This could enable the user to escalate their privileges, potentially leading to unauthorized access and control over the system. It is crucial for users to apply relevant security updates to mitigate any associated risks.

Affected Version(s)

Intel NUC BIOS firmware See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.