Lucene search

K
cve[email protected]CVE-2023-32617
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-32617

2023-08-1103:15:32
CWE-20
web.nvd.nist.gov
14
cve-2023-32617
input validation
intel
nuc
rugged kit
bios
firmware
privilege escalation
local access

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

Improper input validation in some Intelยฎ NUC Rugged Kit, Intelยฎ NUC Kit and Intelยฎ Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc_kit_nuc7i7bnhx1_firmwareMatch-
AND
intelnuc_kit_nuc7i7bnhx1Match-
Node
intelnuc_7_home_nuc7i5bnkp_firmwareMatch-
AND
intelnuc_7_home_nuc7i5bnkpMatch-
Node
intelnuc_7_home_nuc7i3bnhxf_firmwareMatch-
AND
intelnuc_7_home_nuc7i3bnhxfMatch-
Node
intelnuc_7_enthusiast_nuc7i7bnkq_firmwareMatch-
AND
intelnuc_7_enthusiast_nuc7i7bnkqMatch-
Node
intelnuc_kit_nuc7i3bnhx1_firmwareMatch-
AND
intelnuc_kit_nuc7i3bnhx1Match-
Node
intelnuc_7_enthusiast_nuc7i7bnhxg_firmwareMatch-
AND
intelnuc_7_enthusiast_nuc7i7bnhxgMatch-
Node
intelnuc_7_home_nuc7i5bnhxf_firmwareMatch-
AND
intelnuc_7_home_nuc7i5bnhxfMatch-
Node
intelnuc_kit_nuc7i5bnhx1_firmwareMatch-
AND
intelnuc_kit_nuc7i5bnhx1Match-
Node
intelnuc_board_nuc7i7bnb_firmwareMatch-
AND
intelnuc_board_nuc7i7bnbMatch-
Node
intelnuc_board_nuc7i5bnb_firmwareMatch-
AND
intelnuc_board_nuc7i5bnbMatch-
Node
intelnuc_board_nuc7i3bnb_firmwareMatch-
AND
intelnuc_board_nuc7i3bnbMatch-
Node
intelnuc_kit_nuc7i5bnh_firmwareMatch-
AND
intelnuc_kit_nuc7i5bnhMatch-
Node
intelnuc_kit_nuc7i3bnk_firmwareMatch-
AND
intelnuc_kit_nuc7i3bnkMatch-
Node
intelnuc_kit_nuc7i5bnk_firmwareMatch-
AND
intelnuc_kit_nuc7i5bnkMatch-
Node
intelnuc_kit_nuc7i7bnh_firmwareMatch-
AND
intelnuc_kit_nuc7i7bnhMatch-
Node
intelnuc_kit_nuc7i3bnh_firmwareMatch-
AND
intelnuc_kit_nuc7i3bnhMatch-
Node
intelnuc_8_rugged_kit_nuc8cchkrn_firmwareMatch-
AND
intelnuc_8_rugged_kit_nuc8cchkrnMatch-
Node
intelnuc_8_rugged_board_nuc8cchbn_firmwareMatch-
AND
intelnuc_8_rugged_board_nuc8cchbnMatch-
Node
intelnuc_8_rugged_kit_nuc8cchkr_firmwareMatch-
AND
intelnuc_8_rugged_kit_nuc8cchkrMatch-
Node
intelnuc_board_nuc8cchb_firmwareMatch-
AND
intelnuc_board_nuc8cchbMatch-
Node
intelnuc_kit_nuc6cayh_firmwareMatch-
AND
intelnuc_kit_nuc6cayhMatch-
Node
intelnuc_kit_nuc6cays_firmwareMatch-
AND
intelnuc_kit_nuc6caysMatch-
Node
intelcompute_stick_stk2mv64cc_firmwareMatch-
AND
intelcompute_stick_stk2mv64ccMatch-

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-32617