CVE-2023-29495 — Improper Input Validation in Intel NUC 8 Mainstream-g KIT Nuc8i5inh Firmware

CWE-20 — Improper Input Validation3 documents3 sources

Severity

7.8HIGHNVD

CNA7.5

EPSS

0.1%

top 82.72%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel NUC 8 Mainstream-g KIT Nuc8i5inh Firmware Intel NUC 8 Mainstream-g KIT Nuc8i7inh Firmware

Timeline

PublishedJan 19

Description

Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/nuc_8_mainstream-g_kit_nuc8i5inh_firmware< inwhl357.0049

▶NVDintel/nuc_8_mainstream-g_kit_nuc8i7inh_firmware< inwhl357.0049

🔴Vulnerability Details

GHSA

GHSA-j47j-pv8m-wm25: Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privi↗2024-01-19

▶

CVEList

CVE-2023-29495: Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privi↗2024-01-19

▶