Improper Input Validation in Intel NUC 8 Compute Element BIOS Firmware

CVE-2023-42766

What is CVE-2023-42766?

An improper input validation issue exists within the BIOS firmware of certain Intel NUC 8 Compute Element devices. This vulnerability may enable a privileged user to escalate their privileges through local access. As a result, security mechanisms intended to protect critical processes may be circumvented, posing a potential risk to system integrity. Users are advised to assess their systems for the latest firmware updates and apply necessary patches to mitigate any potential threats. For further information and specific mitigation steps, refer to the official advisory.

References