Skip to content
OpenAdvisories
High WID-SEC-2023-2012 16 CVEs

Intel Firmware: Mehrere Schwachstellen

Published Aug 8, 2023 · Updated Jun 26, 2024 · Revision 2 · de-DE

Vendor: EMC Vendor: Intel Product: Avamar Product: Firmware

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

Product

Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.

Vulnerabilities 16

  • High 8.2
    CVE-2023-28385

    Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged…

    Windows
  • High 8.2
    CVE-2023-32617

    Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware …

  • High 8.2
    CVE-2023-34086

    Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalati…

  • High 7.9
    CVE-2022-37336

    Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable esca…

  • High 7.5
    CVE-2022-36372

    Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escal…

  • High 7.5
    CVE-2023-22449

    Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalati…

  • High 7.5
    CVE-2023-29494

    Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable esc…

  • High 7.5
    CVE-2023-34438

    Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privi…

  • Medium 6.7
    CVE-2023-23577

    Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC ma…

  • Medium 6.1
    CVE-2023-27887

    Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable infor…

  • Medium 6.0
    CVE-2023-22330

    Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable info…

  • Medium 6.0
    CVE-2023-22356

    Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable informatio…

  • Medium 6.0
    CVE-2023-22444

    Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 P…

  • Medium 6.0
    CVE-2023-32285

    Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of …

  • Medium 5.3
    CVE-2023-29500

    Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privileg…

  • Medium 4.6
    CVE-2023-34349

    Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privi…

Revision history

  1. #2

    Neue Updates von Dell aufgenommen

  2. #1

    Initiale Fassung

References