DeutschShown in its original language — a full translation is planned for a future version.
Intel NUC: Mehrere Schwachstellen
view advisory published 2024-01-09
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel NUC Chipsatz, BIOS und Firmware ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42766US | high7.8 | — | ||
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-42429US | high7.8 | — | ||
Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-38587US | high7.8 | — | ||
Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-38541US | high7.8 | — | ||
Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated… | ||||
| CVE-2023-32544US | medium5.5 | — | ||
Improper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software installers before version 1.1.45 may allow an authenticated user to… | ||||
| CVE-2023-32272US | medium5.5 | — | ||
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable de… | ||||
| CVE-2023-29495US | high7.8 | — | ||
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-29244US | high7.8OT elevated | — | ||
Incorrect default permissions in some Intel Integrated Sensor Hub (ISH) driver for Windows 10 for Intel NUC P14E Laptop Element software installers before version 5.4.1.4479 may al… | ||||
| CVE-2023-28743US | high7.8 | — | ||
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-28738US | high7.8 | — | ||
Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2023-28722US | high7.8 | — | ||
Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan