7.8
CVE-2023-38587
- EPSS 0.16%
- Veröffentlicht 19.01.2024 20:15:10
- Zuletzt bearbeitet 21.11.2024 08:13:53
- Erkennungen
LoginImproper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc 8 Home Nuc8i3behfa Firmware Version becfl357.0095
Intel ≫ Nuc 8 Home Nuc8i5behfa Firmware Version becfl357.0095
Intel ≫ Nuc 8 Home Nuc8i5bekpa Firmware Version becfl357.0095
Intel ≫ Nuc 8 Enthusiast Nuc8i7behga Firmware Version becfl357.0095
Intel ≫ Nuc 8 Enthusiast Nuc8i7bekqa Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i3beh Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i3bek Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i5beh Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i5bek Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i7beh Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i3behs Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i5behs Firmware Version becfl357.0095
Intel ≫ Nuc Kit Nuc8i7bek Firmware Version becfl357.0095
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.056 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| Intel | 7.5 | 0.8 | 6 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01028.html