CVE-2023-40220

2023-11-1419:15:30

CWE-92

[email protected]

web.nvd.nist.gov

intel nuc

bios

firmware

buffer restrictions

information disclosure

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.0%

JSON

Improper buffer restrictions in some Intel® NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Node

intelnuc6cayhMatch-

AND

intelnuc6cayh_firmwareRange<ayaplcel.86a.0076

Node

intelnuc6caysMatch-

AND

intelnuc6cays_firmwareRange<ayaplcel.86a.0076

VendorProductVersionCPE
intelnuc6cayh-cpe:2.3:h:intel:nuc6cayh:-:*:*:*:*:*:*:*
intelnuc6cayh_firmware*cpe:2.3:o:intel:nuc6cayh_firmware:*:*:*:*:*:*:*:*
intelnuc6cays-cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*
intelnuc6cays_firmware*cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	nuc6cayh	-	cpe:2.3:h:intel:nuc6cayh:-:::::::*
intel	nuc6cayh_firmware	*	cpe:2.3:o:intel:nuc6cayh_firmware::::::::
intel	nuc6cays	-	cpe:2.3:h:intel:nuc6cays:-:::::::*
intel	nuc6cays_firmware	*	cpe:2.3:o:intel:nuc6cays_firmware::::::::