CVE-2023-25771

Published: May 10, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

Affected (65)

Intel

59 products

Nuc 8 Compute Element Cm8i3cb4n Firmware

Nuc 8 Compute Element Cm8i5cb8n Firmware

Nuc 8 Compute Element Cm8i7cb8n Firmware

Nuc 8 Compute Element Cm8ccb4r Firmware

Nuc 8 Compute Element Cm8pcb4r Firmware

Nuc 8 Pro Kit Nuc8i3pnk Firmware

Nuc 8 Pro Board Nuc8i3pnb Firmware

Nuc 8 Pro Kit Nuc8i3pnh Firmware

Nuc 9 Pro Compute Element Nuc9v7qnb Firmware

Nuc 9 Pro Compute Element Nuc9v7qnx Firmware

Nuc 9 Pro Compute Element Nuc9vxqnb Firmware

Nuc 9 Pro Compute Element Nuc9vxqnx Firmware

Nuc 8 Home Nuc8i5behfa Firmware

Nuc 8 Home Nuc8i3behfa Firmware

Nuc 8 Enthusiast Nuc8i7behga Firmware

Nuc 8 Home Nuc8i5bekpa Firmware

Nuc 8 Enthusiast Nuc8i7bekqa Firmware

Nuc Kit Nuc8i7beh Firmware

Nuc Kit Nuc8i5bek Firmware

Nuc Kit Nuc8i5beh Firmware

Nuc Kit Nuc8i3bek Firmware

Nuc Kit Nuc8i3beh Firmware

Nuc Kit Nuc8i7bek Firmware

Nuc Kit Nuc8i5behs Firmware

Nuc Kit Nuc8i3behs Firmware

Nuc 8 Business Nuc8i7hnkqc Firmware

Nuc 8 Enthusiast Nuc8i7hvkva Firmware

Nuc 8 Enthusiast Nuc8i7hvkvaw Firmware

Nuc Kit Nuc8i7hvk Firmware

Nuc Kit Nuc8i7hnk Firmware

Compute Stick Stk2mv64cc Firmware

Nuc 7 Essential Nuc7cjysamn Firmware

Nuc Kit Nuc7cjyhn Firmware

Nuc Kit Nuc7pjyhn Firmware

Nuc Kit Nuc7pjyh Firmware

Nuc 7 Essential Nuc7cjysal Firmware

Nuc Kit Nuc7cjyh Firmware

Nuc 7 Home Nuc7i5bnhxf Firmware

Nuc Kit Nuc7i5bnhx1 Firmware

Nuc Kit Nuc7i5bnh Firmware

Nuc Kit Nuc7i3bnk Firmware

Nuc 7 Enthusiast Nuc7i7bnhxg Firmware

Nuc Kit Nuc7i3bnhx1 Firmware

Nuc 7 Enthusiast Nuc7i7bnkq Firmware

Nuc 7 Home Nuc7i3bnhxf Firmware

Nuc 7 Home Nuc7i5bnkp Firmware

Nuc Kit Nuc7i5bnk Firmware

Nuc Kit Nuc7i7bnh Firmware

Nuc Kit Nuc7i3bnh Firmware

Nuc Kit Nuc7i7bnhx1 Firmware

Nuc Board Nuc7i3bnb Firmware

Nuc Board Nuc7i7bnb Firmware

Nuc Board Nuc7i5bnb Firmware

Nuc 8 Home Nuc8i3cysn Firmware

Nuc 8 Home Nuc8i3cysm Firmware

Nuc 8 Mainstream G Kit Nuc8i7inh Firmware

Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware

Nuc 8 Mainstream G Kit Nuc8i5inh Firmware

Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Compute Element Cm8i3cb4n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Nuc 8 Compute Element Cm8i3cb4n	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Compute Element Cm8i5cb8n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Nuc 8 Compute Element Cm8i5cb8n	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Compute Element Cm8i7cb8n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Nuc 8 Compute Element Cm8i7cb8n	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Compute Element Cm8ccb4r Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Nuc 8 Compute Element Cm8ccb4r	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Compute Element Cm8pcb4r Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Nuc 8 Compute Element Cm8pcb4r	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Kit Nuc8i3pnk Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc 8 Pro Kit Nuc8i3pnk	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Board Nuc8i3pnb Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc 8 Pro Board Nuc8i3pnb	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Kit Nuc8i3pnh Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc 8 Pro Kit Nuc8i3pnh	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Compute Element Nuc9v7qnb Firmware	Before qncflx70.0071

Running on/with	Platform Versions
Intel Nuc 9 Pro Compute Element Nuc9v7qnb	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Compute Element Nuc9v7qnx Firmware	Before qncflx70.0071

Running on/with	Platform Versions
Intel Nuc 9 Pro Compute Element Nuc9v7qnx	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Compute Element Nuc9vxqnb Firmware	Before qncflx70.0071

Running on/with	Platform Versions
Intel Nuc 9 Pro Compute Element Nuc9vxqnb	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Compute Element Nuc9vxqnx Firmware	Before qncflx70.0071

Running on/with	Platform Versions
Intel Nuc 9 Pro Compute Element Nuc9vxqnx	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Nuc8i5behfa Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc 8 Home Nuc8i5behfa	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Nuc8i3behfa Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc 8 Home Nuc8i3behfa	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Enthusiast Nuc8i7behga Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc 8 Enthusiast Nuc8i7behga	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Nuc8i5bekpa Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc 8 Home Nuc8i5bekpa	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Enthusiast Nuc8i7bekqa Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc 8 Enthusiast Nuc8i7bekqa	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7beh Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7beh	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i5bek Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i5bek	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i5beh Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i5beh	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i3bek Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i3bek	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i3beh Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i3beh	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7bek Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7bek	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i5behs Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i5behs	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i3behs Firmware	Before becfl357.0092

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i3behs	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Business Nuc8i7hnkqc Firmware	Before hnkbki70.0070

Running on/with	Platform Versions
Intel Nuc 8 Business Nuc8i7hnkqc	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Enthusiast Nuc8i7hvkva Firmware	Before hnkbki70.0070

Running on/with	Platform Versions
Intel Nuc 8 Enthusiast Nuc8i7hvkva	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Enthusiast Nuc8i7hvkvaw Firmware	Before hnkbki70.0070

Running on/with	Platform Versions
Intel Nuc 8 Enthusiast Nuc8i7hvkvaw	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7hvk Firmware	Before hnkbki70.0070

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7hvk	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7hnk Firmware	Before hnkbki70.0070

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7hnk	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk2mv64cc Firmware	Before ccsklm5v.0067

Running on/with	Platform Versions
Intel Compute Stick Stk2mv64cc	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc 7 Essential Nuc7cjysamn Firmware	Before ayaplcel.0074

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7cjyhn Firmware	Before ayaplcel.0074

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7pjyhn Firmware	Before ayaplcel.0074

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7pjyh Firmware	Before ayaplcel.0074

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc 7 Essential Nuc7cjysal Firmware	Before ayaplcel.0074

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7cjyh Firmware	Before ayaplcel.0074

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i5bnhxf Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i5bnhxf	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnhx1 Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnhx1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnh Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnh	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnk Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Enthusiast Nuc7i7bnhxg Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc 7 Enthusiast Nuc7i7bnhxg	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnhx1 Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnhx1	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Enthusiast Nuc7i7bnkq Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc 7 Enthusiast Nuc7i7bnkq	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i3bnhxf Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i3bnhxf	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i5bnkp Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i5bnkp	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnk Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnk	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnh Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnh	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnh Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnh	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnhx1 Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnhx1	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i3bnb Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Board Nuc7i3bnb	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i7bnb Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Board Nuc7i7bnb	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i5bnb Firmware	Before bnkbl357.0089

Running on/with	Platform Versions
Intel Nuc Board Nuc7i5bnb	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Nuc8i3cysn Firmware	Before cycnli35.0054

Running on/with	Platform Versions
Intel Nuc 8 Home Nuc8i3cysn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Nuc8i3cysm Firmware	Before cycnli35.0054

Running on/with	Platform Versions
Intel Nuc 8 Home Nuc8i3cysm	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh Firmware	Before inwhl357.0047

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware	Before inwhl357.0047

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh Firmware	Before inwhl357.0047

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware	Before inwhl357.0047

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i5inh	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Essential Nuc7cjysamn Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc 7 Essential Nuc7cjysamn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7cjyhn Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc Kit Nuc7cjyhn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7pjyhn Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc Kit Nuc7pjyhn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7pjyh Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc Kit Nuc7pjyh	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Essential Nuc7cjysal Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc 7 Essential Nuc7cjysal	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7cjyh Firmware	Before jyglkcpx.0069

Running on/with	Platform Versions
Intel Nuc Kit Nuc7cjyh	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.