Skip to content
OpenAdvisories
Medium WID-SEC-2023-1173 22 CVEs

Intel NUC: Mehrere Schwachstellen

Published May 9, 2023 · Updated May 9, 2023 · de-DE

Vendor: Intel Product: BIOS Product: BIOS Update Software Product: Driver and Support Assistant Product: Driver and Support Assistant NUC Laptop Element Software Product: Driver and Support Assistant NUC Pro Software Suite Product: Driver and Support Assistant NUC Software Studio Service Installer Product: Firmware HDMI Update Tool for NUC

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS, Intel Firmware und Intel Driver and Support Assistant von NUC Systemen ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.
Intel Treiber- und Support-Assistent sucht nach Intel-Produkten und -Treibern am eigenen System und meldet, wenn Updates für das System verfügbar sind.

Vulnerabilities 22

  • High 7.5
    CVE-2022-28699

    Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalat…

  • High 7.5
    CVE-2022-34147

    Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, …

  • High 7.5
    CVE-2022-36339

    Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC…

  • High 7.2
    CVE-2022-32766

    Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation …

  • High 7.2
    CVE-2023-22312

    Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalatio…

  • Medium 6.7
    CVE-2022-21162

    Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authen…

  • Medium 6.7
    CVE-2022-32578

    Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user …

  • Medium 6.7
    CVE-2022-34848

    Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user…

  • Medium 6.7
    CVE-2022-34855

    Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potent…

  • Medium 6.7
    CVE-2022-36391

    Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated…

  • Medium 6.7
    CVE-2022-38101

    Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.…

  • Medium 6.7
    CVE-2022-38103

    Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow…

  • Medium 6.7
    CVE-2022-40971

    Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an a…

  • Medium 6.7
    CVE-2022-41628

    Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows …

    Windows
  • Medium 6.7
    CVE-2022-41687

    Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10…

    Windows
  • Medium 6.7
    CVE-2022-46656

    Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticate…

  • Medium 6.7
    CVE-2023-27382

    Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 be…

    Windows
  • Medium 6.1
    CVE-2022-37327

    Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Min…

  • Medium 5.8
    CVE-2023-25771

    Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of…

  • Medium 5.3
    CVE-2022-32582

    Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Perf…

  • Medium 4.0
    CVE-2022-31477

    Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable informati…

  • Low 3.4
    CVE-2022-32577

    Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user…

Revision history

  1. #1

    Initiale Fassung

References