Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel NUC BIOS firmware ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen oder Informationen offenzulegen.
Product
Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.
Vulnerabilities 5
-
Medium 5.3
Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable infor…
-
Medium 4.1
Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user …
-
Unscored —CVE-2022-34301 Public exploit
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass …
-
Unscored —CVE-2022-34302 Public exploit
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or…
-
Unscored —CVE-2022-34303 Public exploit
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper wit…
Revision history
-
#1
Initiale Fassung
References
-
Intel Security Advisory INTEL-SA-01001 vom 2023-11-14
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01001.html