DeutschShown in its original language — a full translation is planned for a future version.
Intel NUC: Mehrere Schwachstellen
view advisory published 2023-05-09
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS, Intel Firmware und Intel Driver and Support Assistant von NUC Systemen ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen
01
describes (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-27382US | high7.8OT elevated | — | ||
Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an authenticated user to pot… | ||||
| CVE-2023-25771US | medium5.5 | — | ||
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. | ||||
| CVE-2023-22312US | high7.8 | — | ||
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2022-46656US | high7.8 | — | ||
Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via loca… | ||||
| CVE-2022-41687US | high7.8OT elevated | — | ||
Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to pot… | ||||
| CVE-2022-41628US | high7.8 | — | ||
Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to p… | ||||
| CVE-2022-40971US | high7.8OT elevated | — | ||
Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privile… | ||||
| CVE-2022-38103US | high7.8 | — | ||
Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of pr… | ||||
| CVE-2022-38101US | high7.8 | — | ||
Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable es… | ||||
| CVE-2022-37327US | medium5.5 | — | ||
Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, I… | ||||
| CVE-2022-36391US | high7.8OT elevated | — | ||
Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local… | ||||
| CVE-2022-36339US | high7.8 | — | ||
Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable esc… | ||||
| CVE-2022-34855US | high7.8 | — | ||
Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2022-34848US | high7.8 | — | ||
Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local acce… | ||||
| CVE-2022-34147US | high7.8 | — | ||
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Elem… | ||||
| CVE-2022-32766US | high7.8 | — | ||
Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2022-32582US | medium4.4 | — | ||
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a… | ||||
| CVE-2022-32578US | high7.8 | — | ||
Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local acces… | ||||
| CVE-2022-32577US | medium6.0 | — | ||
Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of se… | ||||
| CVE-2022-31477US | medium4.4 | — | ||
Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. | ||||
showing 20 of 22
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2023-1173 - CSAF Versionself
- WID-SEC-2023-1173 - Portal Versionself
- Intel Security Advisory vom 2023-05-09external
- Intel Security Advisory vom 2023-05-09external
- Intel Security Advisory vom 2023-05-09external
- Intel Security Advisory vom 2023-05-09external
- Intel Security Advisory vom 2023-05-09external
- Intel Security Advisory vom 2023-05-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan