HIGH✓ PATCH🇬🇧 English

CVE-2024-34163

CVSS 8.7v4.0pub. 2024-08-14upd. 2024-09-12

Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Intel Nuc X15 Laptop Kit Lapac71g

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapac71g Firmware

    OS
    Intel
    < 0065

  • Intel Nuc X15 Laptop Kit Lapac71h

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapac71h Firmware

    OS
    Intel
    < 0065

  • Intel Nuc X15 Laptop Kit Lapbc510

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapbc510 Firmware

    OS
    Intel
    < 0083

  • Intel Nuc X15 Laptop Kit Lapbc710

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapbc710 Firmware

    OS
    Intel
    < 0083

  • Intel Nuc X15 Laptop Kit Lapkc51e

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapkc51e Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Lapkc71e

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapkc71e Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Lapkc71f

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Lapkc71f Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Laprc510

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Laprc510 Firmware

    OS
    Intel
    < 0066

  • Intel Nuc X15 Laptop Kit Laprc710

    HW
    Intel
    wszystkie wersje

  • Intel Nuc X15 Laptop Kit Laprc710 Firmware

    OS
    Intel
    < 0066
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2024-25561MEDIUM5.4ten sam produkt

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 ma...

CVE-2023-40540MEDIUM4.1ten sam produkt

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile...

CVE-2021-45046CRITICAL9.0⚠ KEVten sam vendor

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-defau...

CVE-2021-44228CRITICAL10.0⚠ KEVten sam vendor

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features u...

CVE-2017-5689CRITICAL9.8⚠ KEVten sam vendor

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel A...