CVE-2023-28722

CWE-923 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 77.55%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel NUC 8 Mainstream-g KIT Nuc8i5inh Firmware Intel NUC 8 Mainstream-g KIT Nuc8i7inh Firmware

Timeline

PublishedJan 19

Description

Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:HExploitability: 0.8 | Impact: 5.3

Affected Packages3 packages

▶CVEListV5intel_nuc_bios_firmwarebefore version IN0048

▶NVDintel/nuc_8_mainstream-g_kit_nuc8i5inh_firmwareinwhl357.0049

▶NVDintel/nuc_8_mainstream-g_kit_nuc8i7inh_firmwareinwhl357.0049

🔴Vulnerability Details

GHSA

GHSA-qcpg-pwrc-8xc5: Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of pr↗2024-01-19

▶

CVEList

CVE-2023-28722: Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of pr↗2024-01-19

▶