Improper Access Control in Intel UEFI Integrator Tools for NUC Devices

CVE-2024-26022

What is CVE-2024-26022?

The vulnerability arises from improper access control mechanisms within Intel's UEFI Integrator Tools on Aptio V, specifically designed for Intel NUC systems. This flaw permits an authenticated user to gain elevated privileges locally, which could lead to unauthorized actions within the system. Given the nature of the hardware involved, it is critical for users and administrators of affected Intel UEFI Integrator Tools to assess their security posture and ensure that appropriate mitigations are in place to prevent exploitation.

References