CVE-2023-25771

CWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 80.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
59
Intel Compute Stick Stk2mv64cc FirmwareIntel NUC 7 Enthusiast Nuc7i7bnhxg FirmwareIntel NUC 7 Enthusiast Nuc7i7bnkq Firmware+56 more
Timeline
PublishedMay 10

Description

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:HExploitability: 0.6 | Impact: 4.7

Affected Packages60 packages

▶CVEListV5intel(r)_nuc_bios_firmwareSee references
▶NVDintel/nuc_kit_nuc7cjyh_firmware< ayaplcel.0074+1
▶NVDintel/nuc_kit_nuc7pjyh_firmware< ayaplcel.0074+1
▶NVDintel/nuc_kit_nuc7cjyhn_firmware< ayaplcel.0074+1

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2cfj-f596-h4fr: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access↗2023-05-10
▶
CVEList
CVE-2023-25771: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access↗2023-05-10
▶