Lucene search
HistoryAug 11, 2023 - 3:15 a.m.
CVE-2023-28385
improper authorization
intel nuc
privilege escalation
windows
local access
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Improper authorization in the Intel® NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.
Affected configurations
Node
intelnext_unit_of_computing_firmwareRange<2.0.0.9
microsoftwindowsMatch-
Related
prion
prion
Authorization
2023-08-11 03:15:00
intel
intel
Intel® NUC Pro Software Suite Advisory
2023-08-08 00:00:00
cve
cve
CVE-2023-28385
2023-08-11 03:15:24
cvelist
cvelist
CVE-2023-28385
2023-08-11 02:37:13
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2023-28385