Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Nuc 8 Enthusiast Nuc8i7behga
HWIntelall versionsIntel Nuc 8 Enthusiast Nuc8i7behga Firmware
OSIntelbecfl357.0095Intel Nuc 8 Enthusiast Nuc8i7bekqa
HWIntelall versionsIntel Nuc 8 Enthusiast Nuc8i7bekqa Firmware
OSIntelbecfl357.0095Intel Nuc 8 Home Nuc8i3behfa
HWIntelall versionsIntel Nuc 8 Home Nuc8i3behfa Firmware
OSIntelbecfl357.0095Intel Nuc 8 Home Nuc8i5behfa
HWIntelall versionsIntel Nuc 8 Home Nuc8i5behfa Firmware
OSIntelbecfl357.0095Intel Nuc 8 Home Nuc8i5bekpa
HWIntelall versionsIntel Nuc 8 Home Nuc8i5bekpa Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i3beh
HWIntelall versionsIntel Nuc Kit Nuc8i3beh Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i3behs
HWIntelall versionsIntel Nuc Kit Nuc8i3behs Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i3bek
HWIntelall versionsIntel Nuc Kit Nuc8i3bek Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i5beh
HWIntelall versionsIntel Nuc Kit Nuc8i5beh Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i5behs
HWIntelall versionsIntel Nuc Kit Nuc8i5behs Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i5bek
HWIntelall versionsIntel Nuc Kit Nuc8i5bek Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i7beh
HWIntelall versionsIntel Nuc Kit Nuc8i7beh Firmware
OSIntelbecfl357.0095Intel Nuc Kit Nuc8i7bek
HWIntelall versionsIntel Nuc Kit Nuc8i7bek Firmware
OSIntelbecfl357.0095
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2020-0530HIGH7.8same product
Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enabl...
CVE-2023-25771MEDIUM5.8same product
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable ...
CVE-2020-0526MEDIUM6.7same product
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escal...
CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor
Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup
CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same vendor
Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup