CVE-2023-32617

Published: Aug 11, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (23)

Products: Intel: Nuc Kit Nuc7i7bnhx1 Firmware, Nuc 7 Home Nuc7i5bnkp Firmware, Nuc 7 Home Nuc7i3bnhxf Firmware, Nuc 7 Enthusiast Nuc7i7bnkq Firmware, Nuc Kit Nuc7i3bnhx1 Firmware, Nuc 7 Enthusiast Nuc7i7bnhxg Firmware, Nuc 7 Home Nuc7i5bnhxf Firmware, Nuc Kit Nuc7i5bnhx1 Firmware, Nuc Board Nuc7i7bnb Firmware, Nuc Board Nuc7i5bnb Firmware, Nuc Board Nuc7i3bnb Firmware, Nuc Kit Nuc7i5bnh Firmware, Nuc Kit Nuc7i3bnk Firmware, Nuc Kit Nuc7i5bnk Firmware, Nuc Kit Nuc7i7bnh Firmware, Nuc Kit Nuc7i3bnh Firmware, Nuc 8 Rugged Kit Nuc8cchkrn Firmware, Nuc 8 Rugged Board Nuc8cchbn Firmware, Nuc 8 Rugged Kit Nuc8cchkr Firmware, Nuc Board Nuc8cchb Firmware, Nuc Kit Nuc6cayh Firmware, Nuc Kit Nuc6cays Firmware, Compute Stick Stk2mv64cc Firmware

Intel

23 products

Nuc Kit Nuc7i7bnhx1 Firmware

Nuc 7 Home Nuc7i5bnkp Firmware

Nuc 7 Home Nuc7i3bnhxf Firmware

Nuc 7 Enthusiast Nuc7i7bnkq Firmware

Nuc Kit Nuc7i3bnhx1 Firmware

Nuc 7 Enthusiast Nuc7i7bnhxg Firmware

Nuc 7 Home Nuc7i5bnhxf Firmware

Nuc Kit Nuc7i5bnhx1 Firmware

Nuc Board Nuc7i7bnb Firmware

Nuc Board Nuc7i5bnb Firmware

Nuc Board Nuc7i3bnb Firmware

Nuc Kit Nuc7i5bnh Firmware

Nuc Kit Nuc7i3bnk Firmware

Nuc Kit Nuc7i5bnk Firmware

Nuc Kit Nuc7i7bnh Firmware

Nuc Kit Nuc7i3bnh Firmware

Nuc 8 Rugged Kit Nuc8cchkrn Firmware

Nuc 8 Rugged Board Nuc8cchbn Firmware

Nuc 8 Rugged Kit Nuc8cchkr Firmware

Nuc Board Nuc8cchb Firmware

Nuc Kit Nuc6cayh Firmware

Nuc Kit Nuc6cays Firmware

Compute Stick Stk2mv64cc Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnhx1 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnhx1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i5bnkp Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i5bnkp	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i3bnhxf Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i3bnhxf	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Enthusiast Nuc7i7bnkq Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 7 Enthusiast Nuc7i7bnkq	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnhx1 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnhx1	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Enthusiast Nuc7i7bnhxg Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 7 Enthusiast Nuc7i7bnhxg	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home Nuc7i5bnhxf Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 7 Home Nuc7i5bnhxf	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnhx1 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnhx1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i7bnb Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Board Nuc7i7bnb	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i5bnb Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Board Nuc7i5bnb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i3bnb Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Board Nuc7i3bnb	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnk Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnk	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnk Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnk	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnh	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnh	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Rugged Kit Nuc8cchkrn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 8 Rugged Kit Nuc8cchkrn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Rugged Board Nuc8cchbn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 8 Rugged Board Nuc8cchbn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc8cchb Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Board Nuc8cchb	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6cayh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc6cayh	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6cays Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit Nuc6cays	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk2mv64cc Firmware	All versions

Running on/with	Platform Versions
Intel Compute Stick Stk2mv64cc	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html

Source: secure@intel.com

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.