Lucene search

IntelCVE-2024-34163

HistoryAug 14, 2024 - 2:15 p.m.

CVE-2024-34163

2024-08-1414:15:26

CWE-20

intel

web.nvd.nist.gov

intel nuc

input validation

firmware

privilege escalation

local access

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS4

8.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.9

Confidence

High

EPSS

Percentile

9.5%

JSON

Improper input validation in firmware for some Intel® NUC may allow a privileged user to potentially enableescalation of privilege via local access.

Affected configurations

Nvd

Vulnrichment

Node

intelnuc_x15_laptop_kit_lapbc510_firmwareRange<0083

AND

intelnuc_x15_laptop_kit_lapbc510Match-

Node

intelnuc_x15_laptop_kit_lapbc710_firmwareRange<0083

AND

intelnuc_x15_laptop_kit_lapbc710Match-

Node

intelnuc_x15_laptop_kit_lapac71g_firmwareRange<0065

AND

intelnuc_x15_laptop_kit_lapac71gMatch-

Node

intelnuc_x15_laptop_kit_lapac71h_firmwareRange<0065

AND

intelnuc_x15_laptop_kit_lapac71hMatch-

Node

intelnuc_x15_laptop_kit_lapkc51e_firmwareRange<0048

AND

intelnuc_x15_laptop_kit_lapkc51eMatch-

Node

intelnuc_x15_laptop_kit_lapkc71e_firmwareRange<0048

AND

intelnuc_x15_laptop_kit_lapkc71eMatch-

Node

intelnuc_x15_laptop_kit_lapkc71f_firmwareRange<0048

AND

intelnuc_x15_laptop_kit_lapkc71fMatch-

Node

intelnuc_x15_laptop_kit_laprc510_firmwareRange<0066

AND

intelnuc_x15_laptop_kit_laprc510Match-

Node

intelnuc_x15_laptop_kit_laprc710_firmwareRange<0066

AND

intelnuc_x15_laptop_kit_laprc710Match-

VendorProductVersionCPE
intelnuc_x15_laptop_kit_lapbc510_firmware*cpe:2.3:o:intel:nuc_x15_laptop_kit_lapbc510_firmware:*:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapbc510-cpe:2.3:h:intel:nuc_x15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapbc710_firmware*cpe:2.3:o:intel:nuc_x15_laptop_kit_lapbc710_firmware:*:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapbc710-cpe:2.3:h:intel:nuc_x15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapac71g_firmware*cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71g_firmware:*:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapac71g-cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71g:-:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapac71h_firmware*cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71h_firmware:*:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapac71h-cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71h:-:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapkc51e_firmware*cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc51e_firmware:*:*:*:*:*:*:*:*
intelnuc_x15_laptop_kit_lapkc51e-cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc51e:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	nuc_x15_laptop_kit_lapbc510_firmware	*	cpe:2.3:o:intel:nuc_x15_laptop_kit_lapbc510_firmware::::::::
intel	nuc_x15_laptop_kit_lapbc510	-	cpe:2.3:h:intel:nuc_x15_laptop_kit_lapbc510:-:::::::*
intel	nuc_x15_laptop_kit_lapbc710_firmware	*	cpe:2.3:o:intel:nuc_x15_laptop_kit_lapbc710_firmware::::::::
intel	nuc_x15_laptop_kit_lapbc710	-	cpe:2.3:h:intel:nuc_x15_laptop_kit_lapbc710:-:::::::*
intel	nuc_x15_laptop_kit_lapac71g_firmware	*	cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71g_firmware::::::::
intel	nuc_x15_laptop_kit_lapac71g	-	cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71g:-:::::::*
intel	nuc_x15_laptop_kit_lapac71h_firmware	*	cpe:2.3:o:intel:nuc_x15_laptop_kit_lapac71h_firmware::::::::
intel	nuc_x15_laptop_kit_lapac71h	-	cpe:2.3:h:intel:nuc_x15_laptop_kit_lapac71h:-:::::::*
intel	nuc_x15_laptop_kit_lapkc51e_firmware	*	cpe:2.3:o:intel:nuc_x15_laptop_kit_lapkc51e_firmware::::::::
intel	nuc_x15_laptop_kit_lapkc51e	-	cpe:2.3:h:intel:nuc_x15_laptop_kit_lapkc51e:-:::::::*

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01022.html

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS4

8.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.9

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-34163