Microarchitectural Resource Vulnerability in Intel NUC BIOS Firmware
CVE-2023-40540

4.1MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc BiOS Firmware
Vendor
CVE Published:
14 November 2023

What is CVE-2023-40540?

Certain Intel NUC BIOS firmware versions exhibit a vulnerability related to the non-transparent sharing of microarchitectural resources. This flaw may allow a privileged user local access to potentially disclose sensitive information. It is crucial to review the impacted firmware versions and update to the latest releases to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) NUC BIOS firmware some Intel(R) NUC BIOS firmware

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.