Intel NUC 8 Compute Elements Access Control Error Vulnerability

2022-11-1600:00:00

China National Vulnerability Database

www.cnvd.org.cn

intel nuc

access control

vulnerability

bios firmware

local privilege elevation

attacker

cnvd

0.0004 Low

EPSS

Percentile

12.7%

JSON

Intel NUC is a small minicomputer from Intel (U.S.) Inc. Intel® NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation.

CPENameOperatorVersion
intel nuc_8_compute_element_cm8i7cb_firmware <cbwhleq357.0096
intel nuc_8_compute_element_cm8i3cb_firmware <cbwhleq357.0096
intel nuc_8_compute_element_cm8ccb_firmware <cbwhleq357.0096
intel nuc_8_compute_element_cm8i5cb_firmware <cbwhleq357.0096
intel nuc_8_compute_element_cm8pcb_firmware <cbwhleq357.0096

Name	Operator	Version
intel nuc_8_compute_element_cm8i7cb_firmware <cbwhl	eq	357.0096
intel nuc_8_compute_element_cm8i3cb_firmware <cbwhl	eq	357.0096
intel nuc_8_compute_element_cm8ccb_firmware <cbwhl	eq	357.0096
intel nuc_8_compute_element_cm8i5cb_firmware <cbwhl	eq	357.0096
intel nuc_8_compute_element_cm8pcb_firmware <cbwhl	eq	357.0096

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CNVD-2023-16367