Lucene search

K
cvelistIntelCVELIST:CVE-2023-22444
HistoryAug 11, 2023 - 2:37 a.m.

CVE-2023-22444

2023-08-1102:37:30
CWE-665
intel
www.cve.org
3
cve-2023-22444
intel
nuc
bios
firmware
vulnerability
privileged user
information disclosure
local access

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%

Improper initialization in some Intelยฎ NUC 13 Extreme Compute Element, Intelยฎ NUC 13 Extreme Kit, Intelยฎ NUC 11 Performance Kit, Intelยฎ NUC 11 Performance Mini PC, Intelยฎ NUC Compute Element, Intelยฎ NUC Laptop Kit, Intelยฎ NUC Pro Kit, Intelยฎ NUC Pro Board and Intelยฎ NUC Pro Mini PC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board and Intel(R) NUC Pro Mini PC BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-22444