CVE-2023-28743

CWE-20 — Improper Input Validation3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 83.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel NUC 9 PRO Compute Element Nuc9v7qnb Firmware Intel NUC 9 PRO KIT Nuc9v7qnb Firmware Intel NUC 9 PRO KIT Nuc9v7qnx Firmware +1 more

Timeline

PublishedJan 19

Description

Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 0.8 | Impact: 6.0

Affected Packages5 packages

▶CVEListV5intel_nuc_bios_firmwarebefore version QN0073

▶NVDintel/nuc_9_pro_kit_nuc9v7qnb_firmwareqncflx70.0073

▶NVDintel/nuc_9_pro_kit_nuc9v7qnx_firmwareqncflx70.0073

▶NVDintel/nuc_pro_compute_element_nuc9v7qnx_firmwareqncflx70.0073

▶NVDintel/nuc_9_pro_compute_element_nuc9v7qnb_firmwareqncflx70.0073

🔴Vulnerability Details

GHSA

GHSA-jhrj-gw3m-wqx7: Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privi↗2024-01-19

▶

CVEList

CVE-2023-28743: Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privi↗2024-01-19

▶