HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-34163

CVSS 8.7v4.0pub. 2024-08-14upd. 2024-09-12

Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.

CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Intel Nuc X15 Laptop Kit Lapac71g

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapac71g Firmware

    OS
    Intel
    < 0065

  • Intel Nuc X15 Laptop Kit Lapac71h

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapac71h Firmware

    OS
    Intel
    < 0065

  • Intel Nuc X15 Laptop Kit Lapbc510

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapbc510 Firmware

    OS
    Intel
    < 0083

  • Intel Nuc X15 Laptop Kit Lapbc710

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapbc710 Firmware

    OS
    Intel
    < 0083

  • Intel Nuc X15 Laptop Kit Lapkc51e

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapkc51e Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Lapkc71e

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapkc71e Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Lapkc71f

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Lapkc71f Firmware

    OS
    Intel
    < 0048

  • Intel Nuc X15 Laptop Kit Laprc510

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Laprc510 Firmware

    OS
    Intel
    < 0066

  • Intel Nuc X15 Laptop Kit Laprc710

    HW
    Intel
    all versions

  • Intel Nuc X15 Laptop Kit Laprc710 Firmware

    OS
    Intel
    < 0066
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-25561MEDIUM5.4same product

Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 ma...

CVE-2023-40540MEDIUM4.1same product

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile...

CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor

Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup

CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same vendor

Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same vendor

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy