Lucene search

[email protected]CVE-2023-25771

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-25771

2023-05-1014:15:32

CWE-284

[email protected]

web.nvd.nist.gov

cve-2023-25771

intel nuc

bios firmware

access control

denial of service

nvd

5.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper access control for some Intel® NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

Affected configurations

NVD

Node

intelnuc_8_compute_element_cm8i3cb4n_firmwareRange<cbwhl357.0101

AND

intelnuc_8_compute_element_cm8i3cb4nMatch-

Node

intelnuc_8_compute_element_cm8i5cb8n_firmwareRange<cbwhl357.0101

AND

intelnuc_8_compute_element_cm8i5cb8nMatch-

Node

intelnuc_8_compute_element_cm8i7cb8n_firmwareRange<cbwhl357.0101

AND

intelnuc_8_compute_element_cm8i7cb8nMatch-

Node

intelnuc_8_compute_element_cm8ccb4r_firmwareRange<cbwhl357.0101

AND

intelnuc_8_compute_element_cm8ccb4rMatch-

Node

intelnuc_8_compute_element_cm8pcb4r_firmwareRange<cbwhl357.0101

AND

intelnuc_8_compute_element_cm8pcb4rMatch-

Node

intelnuc_8_pro_kit_nuc8i3pnk_firmwareRange<pnwhl357.0050

AND

intelnuc_8_pro_kit_nuc8i3pnkMatch-

Node

intelnuc_8_pro_board_nuc8i3pnb_firmwareRange<pnwhl357.0050

AND

intelnuc_8_pro_board_nuc8i3pnbMatch-

Node

intelnuc_8_pro_kit_nuc8i3pnh_firmwareRange<pnwhl357.0050

AND

intelnuc_8_pro_kit_nuc8i3pnhMatch-

Node

intelnuc_9_pro_compute_element_nuc9v7qnb_firmwareRange<qncflx70.0071

AND

intelnuc_9_pro_compute_element_nuc9v7qnbMatch-

Node

intelnuc_9_pro_compute_element_nuc9v7qnx_firmwareRange<qncflx70.0071

AND

intelnuc_9_pro_compute_element_nuc9v7qnxMatch-

Node

intelnuc_9_pro_compute_element_nuc9vxqnb_firmwareRange<qncflx70.0071

AND

intelnuc_9_pro_compute_element_nuc9vxqnbMatch-

Node

intelnuc_9_pro_compute_element_nuc9vxqnx_firmwareRange<qncflx70.0071

AND

intelnuc_9_pro_compute_element_nuc9vxqnxMatch-

Node

intelnuc_8_home_nuc8i5behfa_firmwareRange<becfl357.0092

AND

intelnuc_8_home_nuc8i5behfaMatch-

Node

intelnuc_8_home_nuc8i3behfa_firmwareRange<becfl357.0092

AND

intelnuc_8_home_nuc8i3behfaMatch-

Node

intelnuc_8_enthusiast_nuc8i7behga_firmwareRange<becfl357.0092

AND

intelnuc_8_enthusiast_nuc8i7behgaMatch-

Node

intelnuc_8_home_nuc8i5bekpa_firmwareRange<becfl357.0092

AND

intelnuc_8_home_nuc8i5bekpaMatch-

Node

intelnuc_8_enthusiast_nuc8i7bekqa_firmwareRange<becfl357.0092

AND

intelnuc_8_enthusiast_nuc8i7bekqaMatch-

Node

intelnuc_kit_nuc8i7beh_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i7behMatch-

Node

intelnuc_kit_nuc8i5bek_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i5bekMatch-

Node

intelnuc_kit_nuc8i5beh_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i5behMatch-

Node

intelnuc_kit_nuc8i3bek_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i3bekMatch-

Node

intelnuc_kit_nuc8i3beh_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i3behMatch-

Node

intelnuc_kit_nuc8i7bek_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i7bekMatch-

Node

intelnuc_kit_nuc8i5behs_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i5behsMatch-

Node

intelnuc_kit_nuc8i3behs_firmwareRange<becfl357.0092

AND

intelnuc_kit_nuc8i3behsMatch-

Node

intelnuc_8_business_nuc8i7hnkqc_firmwareRange<hnkbki70.0070

AND

intelnuc_8_business_nuc8i7hnkqcMatch-

Node

intelnuc_8_enthusiast_nuc8i7hvkva_firmwareRange<hnkbki70.0070

AND

intelnuc_8_enthusiast_nuc8i7hvkvaMatch-

Node

intelnuc_8_enthusiast_nuc8i7hvkvaw_firmwareRange<hnkbki70.0070

AND

intelnuc_8_enthusiast_nuc8i7hvkvawMatch-

Node

intelnuc_kit_nuc8i7hvk_firmwareRange<hnkbki70.0070

AND

intelnuc_kit_nuc8i7hvkMatch-

Node

intelnuc_kit_nuc8i7hnk_firmwareRange<hnkbki70.0070

AND

intelnuc_kit_nuc8i7hnkMatch-

Node

intelcompute_stick_stk2mv64cc_firmwareRange<ccsklm5v.0067

AND

intelcompute_stick_stk2mv64ccMatch-

Node

intelnuc_7_essential_nuc7cjysamn_firmwareRange<ayaplcel.0074

AND

intelnuc_7_essential_nuc7cjysamnMatch-

Node

intelnuc_kit_nuc7cjyhn_firmwareRange<ayaplcel.0074

AND

intelnuc_kit_nuc7cjyhnMatch-

Node

intelnuc_kit_nuc7pjyhn_firmwareRange<ayaplcel.0074

AND

intelnuc_kit_nuc7pjyhnMatch-

Node

intelnuc_kit_nuc7pjyh_firmwareRange<ayaplcel.0074

AND

intelnuc_kit_nuc7pjyhMatch-

Node

intelnuc_7_essential_nuc7cjysal_firmwareRange<ayaplcel.0074

AND

intelnuc_7_essential_nuc7cjysalMatch-

Node

intelnuc_kit_nuc7cjyh_firmwareRange<ayaplcel.0074

AND

intelnuc_kit_nuc7cjyhMatch-

Node

intelnuc_7_home_nuc7i5bnhxf_firmwareRange<bnkbl357.0089

AND

intelnuc_7_home_nuc7i5bnhxfMatch-

Node

intelnuc_kit_nuc7i5bnhx1_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i5bnhx1Match-

Node

intelnuc_kit_nuc7i5bnh_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i5bnhMatch-

Node

intelnuc_kit_nuc7i3bnk_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i3bnkMatch-

Node

intelnuc_7_enthusiast_nuc7i7bnhxg_firmwareRange<bnkbl357.0089

AND

intelnuc_7_enthusiast_nuc7i7bnhxgMatch-

Node

intelnuc_kit_nuc7i3bnhx1_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i3bnhx1Match-

Node

intelnuc_7_enthusiast_nuc7i7bnkq_firmwareRange<bnkbl357.0089

AND

intelnuc_7_enthusiast_nuc7i7bnkqMatch-

Node

intelnuc_7_home_nuc7i3bnhxf_firmwareRange<bnkbl357.0089

AND

intelnuc_7_home_nuc7i3bnhxfMatch-

Node

intelnuc_7_home_nuc7i5bnkp_firmwareRange<bnkbl357.0089

AND

intelnuc_7_home_nuc7i5bnkpMatch-

Node

intelnuc_kit_nuc7i5bnk_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i5bnkMatch-

Node

intelnuc_kit_nuc7i7bnh_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i7bnhMatch-

Node

intelnuc_kit_nuc7i3bnh_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i3bnhMatch-

Node

intelnuc_kit_nuc7i7bnhx1_firmwareRange<bnkbl357.0089

AND

intelnuc_kit_nuc7i7bnhx1Match-

Node

intelnuc_board_nuc7i3bnb_firmwareRange<bnkbl357.0089

AND

intelnuc_board_nuc7i3bnbMatch-

Node

intelnuc_board_nuc7i7bnb_firmwareRange<bnkbl357.0089

AND

intelnuc_board_nuc7i7bnbMatch-

Node

intelnuc_board_nuc7i5bnb_firmwareRange<bnkbl357.0089

AND

intelnuc_board_nuc7i5bnbMatch-

Node

intelnuc_8_home_nuc8i3cysn_firmwareRange<cycnli35.0054

AND

intelnuc_8_home_nuc8i3cysnMatch-

Node

intelnuc_8_home_nuc8i3cysm_firmwareRange<cycnli35.0054

AND

intelnuc_8_home_nuc8i3cysmMatch-

Node

intelnuc_8_mainstream-g_kit_nuc8i7inh_firmwareRange<inwhl357.0047

AND

intelnuc_8_mainstream-g_kit_nuc8i7inhMatch-

Node

intelnuc_8_mainstream-g_mini_pc_nuc8i7inh_firmwareRange<inwhl357.0047

AND

intelnuc_8_mainstream-g_mini_pc_nuc8i7inhMatch-

Node

intelnuc_8_mainstream-g_kit_nuc8i5inh_firmwareRange<inwhl357.0047

AND

intelnuc_8_mainstream-g_kit_nuc8i5inhMatch-

Node

intelnuc_8_mainstream-g_mini_pc_nuc8i5inh_firmwareRange<inwhl357.0047

AND

intelnuc_8_mainstream-g_mini_pc_nuc8i5inhMatch-

Node

intelnuc_7_essential_nuc7cjysamn_firmwareRange<jyglkcpx.0069

AND

intelnuc_7_essential_nuc7cjysamnMatch-

Node

intelnuc_kit_nuc7cjyhn_firmwareRange<jyglkcpx.0069

AND

intelnuc_kit_nuc7cjyhnMatch-

Node

intelnuc_kit_nuc7pjyhn_firmwareRange<jyglkcpx.0069

AND

intelnuc_kit_nuc7pjyhnMatch-

Node

intelnuc_kit_nuc7pjyh_firmwareRange<jyglkcpx.0069

AND

intelnuc_kit_nuc7pjyhMatch-

Node

intelnuc_7_essential_nuc7cjysal_firmwareRange<jyglkcpx.0069

AND

intelnuc_7_essential_nuc7cjysalMatch-

Node

intelnuc_kit_nuc7cjyh_firmwareRange<jyglkcpx.0069

AND

intelnuc_kit_nuc7cjyhMatch-

CPENameOperatorVersion
intel:nuc_8_compute_element_cm8i3cb4n_firmwareintel nuc 8 compute element cm8i3cb4n firmwareltcbwhl357.0101

CPE	Name	Operator	Version
intel:nuc_8_compute_element_cm8i3cb4n_firmware	intel nuc 8 compute element cm8i3cb4n firmware	lt	cbwhl357.0101

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

5.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-25771

prion1 nvd1 cvelist1 intel1