Intel NUC BIOS firmware privilege escalation | CVE-2023-36372

NAME
__________
Intel NUC BIOS firmware privilege escalation

Platforms Affected:
Intel NUC Kit NUC7i3BNH
Intel NUC Kit NUC7i3BNK
Intel NUC Kit NUC7i3BNHX1
Intel NUC NUC11TNBI3
Intel NUC NUC11TNHI3
Intel NUC NUC11PHKI7C
Intel NUC NUC11PHKI7CAA
Intel NUC NUC9V7QNB
Intel NUC NUC9V7QNX
Intel NUC NUC8CCHKR
Intel NUC NUC8CCHB
Intel NUC 11 Compute Element CM11EBC4W
Intel NUC 11 Compute Element CM11EBi38W
Intel NUC 11 Compute Element CM11EBi58W
Intel NUC 11 Compute Element CM11EBi716W

Risk Level:
7.5

Exploitability:
Unproven

Consequences:
Gain Privileges

DESCRIPTION
__________

Intel NUC BIOS firmware could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper buffer restrictions. An attacker could exploit this vulnerability to gain elevated privileges.

CVSS 3.0 Information
__________

Privileges Required:
High

User Interaction:
None

Scope:
Changed

Access Vector:
Local



A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

 To keep up to date follow us on the below channels.