Lucene search
IntelCVELIST:CVE-2023-28377HistoryNov 14, 2023 - 7:04 p.m.
CVE-2023-28377
2023-11-1419:04:48
CWE-287
intel
www.cve.org
2
improper authentication
intel nuc11ph
usb firmware
windows
escalation of privilege
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Improper authentication in some Intel® NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) NUC Kit NUC11PH USB firmware installation software",
"versions": [
{
"version": "before version 1.1 for Windows",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Authentication flaw
2023-11-14 19:15:00
nvd
nvd
CVE-2023-28377
2023-11-14 19:15:21
vulnrichment
vulnrichment
CVE-2023-28377
2023-11-14 19:04:48
cve
cve
CVE-2023-28377
2023-11-14 19:15:21
intel
intel
Intel® NUC Software Advisory
2023-11-14 00:00:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-28377