Potential Escalation of Privilege Through Improper Firmware Input Validation
CVE-2024-34163

8.2HIGH

Key Information:

Vendor
Intel
Vendor
CVE Published:
14 August 2024

Summary

A security vulnerability exists due to improper input validation in the firmware of certain Intel NUC devices. This weakness could allow a privileged user with local access to execute unauthorized operations, potentially leading to privilege escalation. It is crucial for users and system administrators to review the firmware of their Intel NUC devices and apply necessary updates to mitigate this risk. For detailed information, please refer to the Intel security advisory.

Affected Version(s)

Intel(R) NUC See references

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.