Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HIntel Nuc 8 Mainstream G Kit Nuc8i5inh
HWIntelall versionsIntel Nuc 8 Mainstream G Kit Nuc8i5inh Firmware
OSIntelinwhl357.0036Intel Nuc 8 Mainstream G Kit Nuc8i7inh
HWIntelall versionsIntel Nuc 8 Mainstream G Kit Nuc8i7inh Firmware
OSIntelinwhl357.0036Intel Nuc 8 Mainstream G Mini Pc Nuc8i5inh
HWIntelall versionsIntel Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware
OSIntelinwhl357.0036Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh
HWIntelall versionsIntel Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware
OSIntelinwhl357.0036Intel Nuc 8 Pro Board Nuc8i3pnb
HWIntelall versionsIntel Nuc 8 Pro Board Nuc8i3pnb Firmware
OSIntelpnwhl357.0037Intel Nuc 8 Pro Kit Nuc8i3pnh
HWIntelall versionsIntel Nuc 8 Pro Kit Nuc8i3pnh Firmware
OSIntelpnwhl357.0037Intel Nuc 8 Pro Kit Nuc8i3pnk
HWIntelall versionsIntel Nuc 8 Pro Kit Nuc8i3pnk Firmware
OSIntelpnwhl357.0037Intel Nuc 8 Pro Mini Pc Nuc8i3pnk
HWIntelall versionsIntel Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware
OSIntelpnwhl357.0037Intel Nuc 8 Rugged Kit Nuc8cchkr
HWIntelall versionsIntel Nuc 8 Rugged Kit Nuc8cchkr Firmware
OSIntelchaplcel.0049Intel Nuc 9 Pro Kit Nuc9v7qnx
HWIntelall versionsIntel Nuc 9 Pro Kit Nuc9v7qnx Firmware
OSIntelqncflx70.34Intel Nuc 9 Pro Kit Nuc9vxqnx
HWIntelall versionsIntel Nuc 9 Pro Kit Nuc9vxqnx Firmware
OSIntelqncflx70.34Intel Nuc Board H27002 400
HWIntelall versionsIntel Nuc Board H27002 400 Firmware
OSInteltybyt10h.86aIntel Nuc Board H27002 401
HWIntelall versionsIntel Nuc Board H27002 401 Firmware
OSInteltybyt10h.86aIntel Nuc Board H27002 402
HWIntelall versionsIntel Nuc Board H27002 402 Firmware
OSInteltybyt10h.86aIntel Nuc Board H27002 404
HWIntelall versionsIntel Nuc Board H27002 404 Firmware
OSInteltybyt10h.86a
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2023-28743HIGH7.5same product
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user t...
CVE-2023-29495HIGH7.5same product
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user t...
CVE-2023-32617HIGH8.2same product
Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS ...
CVE-2023-22312HIGH7.2same product
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable ...
CVE-2021-33164HIGH8.2same product
Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privi...