6

CVE-2023-22356

Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Nuc Kit Nuc7i7dnhe Firmware Version-
   Intel ≫ Nuc Kit Nuc7i7dnhe Version-
Intel ≫ Nuc Kit Nuc7i7dnke Firmware Version-
   Intel ≫ Nuc Kit Nuc7i7dnke Version-
Intel ≫ Nuc Nuc11phki7c Firmware Version-
   Intel ≫ Nuc Nuc11phki7c Version-
Intel ≫ Nuc Nuc11phki7caa Firmware Version-
   Intel ≫ Nuc Nuc11phki7caa Version-
Intel ≫ Nuc Kit Nuc8i7hvk Firmware Version-
   Intel ≫ Nuc Kit Nuc8i7hvk Version-
Intel ≫ Nuc Kit Nuc8i7hnk Firmware Version-
   Intel ≫ Nuc Kit Nuc8i7hnk Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.065
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
secure@intel.com 6 1.5 4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.