Lucene search

K
nvd[email protected]NVD:CVE-2023-28743
HistoryJan 19, 2024 - 8:15 p.m.

CVE-2023-28743

2024-01-1920:15:09
CWE-20
web.nvd.nist.gov
intel nuc
input validation
privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc_9_pro_compute_element_nuc9v7qnb_firmwareMatchqncflx70.0073
AND
intelnuc_9_pro_compute_element_nuc9v7qnbMatch-
Node
intelnuc_pro_compute_element_nuc9v7qnx_firmwareMatchqncflx70.0073
AND
intelnuc_9_pro_compute_element_nuc9v7qnxMatch-
Node
intelnuc_9_pro_kit_nuc9v7qnb_firmwareMatchqncflx70.0073
AND
intelnuc_9_pro_kit_nuc9v7qnbMatch-
Node
intelnuc_9_pro_kit_nuc9v7qnx_firmwareMatchqncflx70.0073
AND
intelnuc_9_pro_kit_nuc9v7qnxMatch-

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2023-28743