Lucene search

[email protected]CVE-2023-22312

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-22312

2023-05-1014:15:26

CWE-284

[email protected]

web.nvd.nist.gov

cve-2023-22312

intel

nuc

bios

firmware

access control

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper access control for some Intel® NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelnuc_11_performance_kit_nuc11pahi70zMatch-

AND

intelnuc_11_performance_kit_nuc11pahi70z_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11pahi50zMatch-

AND

intelnuc_11_performance_kit_nuc11pahi50z_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11pahi30zMatch-

AND

intelnuc_11_performance_kit_nuc11pahi30z_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11pahi3Match-

AND

intelnuc_11_performance_kit_nuc11pahi3_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11pahi5Match-

AND

intelnuc_11_performance_kit_nuc11pahi5_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11pahi7Match-

AND

intelnuc_11_performance_kit_nuc11pahi7_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11paki3Match-

AND

intelnuc_11_performance_kit_nuc11paki3_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11paki5Match-

AND

intelnuc_11_performance_kit_nuc11paki5_firmwareRange<patgl357.0050

Node

intelnuc_11_performance_kit_nuc11paki7_firmwareRange<patgl357.0050

AND

intelnuc_11_performance_kit_nuc11paki7Match-

Node

intelnuc_11_performance_mini_pc_nuc11paqi50wa_firmwareRange<patgl357.0050

AND

intelnuc_11_performance_mini_pc_nuc11paqi50waMatch-

Node

intelnuc_11_performance_mini_pc_nuc11paqi70qa_firmwareRange<patgl357.0050

AND

intelnuc_11_performance_mini_pc_nuc11paqi70qaMatch-

Node

intelnuc_11_compute_element_cm11ebi38w_firmwareRange<ebtgl357.0071

AND

intelnuc_11_compute_element_cm11ebi38wMatch-

Node

intelnuc_11_compute_element_cm11ebi58w_firmwareRange<ebtgl357.0071

AND

intelnuc_11_compute_element_cm11ebi58wMatch-

Node

intelnuc_11_compute_element_cm11ebi716w_firmwareRange<ebtgl357.0071

AND

intelnuc_11_compute_element_cm11ebi716wMatch-

Node

intelnuc_11_compute_element_cm11ebc4w_firmwareRange<ebtgl357.0071

AND

intelnuc_11_compute_element_cm11ebc4wMatch-

Node

intelnuc_m15_laptop_kit_lapbc710_firmwareRange<bctgl357.0078

AND

intelnuc_m15_laptop_kit_lapbc710Match-

Node

intelnuc_m15_laptop_kit_lapbc510_firmwareRange<bctgl357.0078

AND

intelnuc_m15_laptop_kit_lapbc510Match-

Node

intellapkc51e_firmwareRange<kctgl357.0044

AND

intellapkc51eMatch-

Node

intellapkc71e_firmwareRange<kctgl357.0044

AND

intellapkc71eMatch-

Node

intellapkc71f_firmwareRange<kctgl357.0044

AND

intellapkc71fMatch-

Node

intelnuc11btmi7_firmwareRange<dbtgl579.0065

AND

intelnuc11btmi7Match-

Node

intelnuc11dbbi7_firmwareRange<dbtgl579.0065

AND

intelnuc11dbbi7Match-

Node

intelnuc11btmi9_firmwareRange<dbtgl579.0065

AND

intelnuc11btmi9Match-

Node

intelnuc11dbbi9_firmwareRange<dbtgl579.0065

AND

intelnuc11dbbi9Match-

Node

intelnuc_11_enthusiast_kit_nuc11phki7c_firmwareRange<phtgl579.0071

AND

intelnuc_11_enthusiast_kit_nuc11phki7cMatch-

Node

intelnuc_11_enthusiast_mini_pc_nuc11phki7caa_firmwareRange<phtgl579.0071

AND

intelnuc_11_enthusiast_mini_pc_nuc11phki7caaMatch-

Node

intelnuc_board_nuc8cchb_firmwareRange<chaplcel.0061

AND

intelnuc_board_nuc8cchbMatch-

Node

intelnuc_8_rugged_board_nuc8cchbn_firmwareRange<chaplcel.0061

AND

intelnuc_8_rugged_board_nuc8cchbnMatch-

Node

intelnuc_8_rugged_kit_nuc8cchkrn_firmwareRange<chaplcel.0061

AND

intelnuc_8_rugged_kit_nuc8cchkrnMatch-

Node

intelnuc_8_rugged_kit_nuc8cchkr_firmwareRange<chaplcel.0061

AND

intelnuc_8_rugged_kit_nuc8cchkrMatch-

Node

intelnuc_11_pro_kit_nuc11tnkv50z_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnkv50zMatch-

Node

intelnuc_11_pro_kit_nuc11tnhv70l_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnhv70lMatch-

Node

intelnuc_11_pro_kit_nuc11tnhv50l_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnhv50lMatch-

Node

intelnuc_11_pro_board_nuc11tnbv7_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_board_nuc11tnbv7Match-

Node

intelnuc_11_pro_kit_nuc11tnkv5_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnkv5Match-

Node

intelnuc_11_pro_kit_nuc11tnkv7_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnkv7Match-

Node

intelnuc_11_pro_kit_nuc11tnhv5_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnhv5Match-

Node

intelnuc_11_pro_mini_pc_nuc11tnkv5_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_mini_pc_nuc11tnkv5Match-

Node

intelnuc_11_pro_mini_pc_nuc11tnkv7_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_mini_pc_nuc11tnkv7Match-

Node

intelnuc_11_pro_kit_nuc11tnhv7_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_kit_nuc11tnhv7Match-

Node

intelnuc_11_pro_board_nuc11tnbv5_firmwareRange<tntglv57.0071

AND

intelnuc_11_pro_board_nuc11tnbv5Match-

CPENameOperatorVersion
intel:nuc_11_performance_kit_nuc11pahi70z_firmwareintel nuc 11 performance kit nuc11pahi70z firmwareltpatgl357.0050

CPE	Name	Operator	Version
intel:nuc_11_performance_kit_nuc11pahi70z_firmware	intel nuc 11 performance kit nuc11pahi70z firmware	lt	patgl357.0050

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-22312

cvelist1 nvd1 prion1 intel1