CVE-2023-29500

Published: Aug 11, 2023Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information disclosure via local access.

Affected (11)

Intel

11 products

Nuc 11 Performance Kit Nuc11pahi70z Firmware

Nuc 11 Performance Kit Nuc11pahi50z Firmware

Nuc 11 Performance Kit Nuc11pahi30z Firmware

Nuc 11 Performance Kit Nuc11pahi3 Firmware

Nuc 11 Performance Kit Nuc11pahi5 Firmware

Nuc 11 Performance Kit Nuc11pahi7 Firmware

Nuc 11 Performance Kit Nuc11paki3 Firmware

Nuc 11 Performance Kit Nuc11paki5 Firmware

Nuc 11 Performance Kit Nuc11paki7 Firmware

Nuc 11 Performance Mini Pc Nuc11paqi50wa Firmware

Nuc 11 Performance Mini Pc Nuc11paqi70qa Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi70z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi70z	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi50z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi50z	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi30z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi30z	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi3 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi7	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki3 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki3	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki5	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki7	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi50wa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi50wa	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi70qa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi70qa	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

Source: secure@intel.com

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.