Lucene search

K
cve[email protected]CVE-2023-42429
HistoryJan 19, 2024 - 8:15 p.m.

CVE-2023-42429

2024-01-1920:15:11
CWE-92
web.nvd.nist.gov
3
intel nuc
bios firmware
cve-2023-42429
security vulnerability
privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc_7_essential_nuc7cjysalMatch-
AND
intelnuc_7_essential_pc_nuc7cjysal_firmwareMatchjyglkcpx.0071
Node
intelnuc_7_essential_nuc7cjysamnMatch-
AND
intelnuc_7_essential_nuc7cjysamn_firmwareMatchjyglkcpx.0071
Node
intelnuc_kit_nuc7cjyhnMatch-
AND
intelnuc_kit_nuc7cjyhn_firmwareMatchjyglkcpx.0071
Node
intelnuc_kit_nuc7cjyhMatch-
AND
intelnuc_kit_nuc7cjyh_firmwareMatchjyglkcpx.0071
Node
intelnuc_kit_nuc7pjyhnMatch-
AND
intelnuc_kit_nuc7pjyhn_firmwareMatchjyglkcpx.0071
Node
intelnuc_kit_nuc7pjyhMatch-
AND
intelnuc_kit_nuc7pjyh_firmwareMatchjyglkcpx.0071

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel NUC BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-42429