7.5
CVE-2023-29494
- EPSS 0.04%
- Veröffentlicht 11.08.2023 03:15:30
- Zuletzt bearbeitet 21.11.2024 07:57:10
- Quelle secure@intel.com
- Teams Watchlist Login
- Unerledigt Login
Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki70z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki30z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki50z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50z Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi30z Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi50z Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi70z Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi3 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi5 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi7 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki3 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki5 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnki7 Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi3 Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi5 Firmware Version-
Intel ≫ Nuc 11 Pro Board Nuc11tnbi7 Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50w Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50l Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30l Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70q Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30p Firmware Version-
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70l Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.089 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| secure@intel.com | 7.5 | 0.8 | 6 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.