Skip to content
OpenAdvisories
Medium WID-SEC-2024-0041 11 CVEs

Intel NUC: Mehrere Schwachstellen

Published Jan 9, 2024 · Updated Jan 9, 2024 · de-DE

Vendor: Intel Product: BIOS NUC Product: Chipset NUC 8 Product: Firmware NUC

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel NUC Chipsatz, BIOS und Firmware ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.

Product

Intel stellt Chipsätze her, die auf Mainboards zur Ansteuerung der Intel Prozessoren eingesetzt werden.
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.

Vulnerabilities 11

  • High 7.9
    CVE-2023-32272

    Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0…

  • High 7.5
    CVE-2023-28738

    Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potenti…

  • High 7.5
    CVE-2023-28743

    Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potenti…

  • High 7.5
    CVE-2023-29495

    Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potenti…

  • High 7.5
    CVE-2023-38587

    Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation …

  • High 7.5
    CVE-2023-42429

    Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalati…

  • High 7.5
    CVE-2023-42766

    Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially …

  • High 7.3
    CVE-2023-32544

    Improper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software install…

    Windows
  • Medium 6.7
    CVE-2023-28722

    Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to pote…

  • Medium 6.7
    CVE-2023-29244

    Incorrect default permissions in some Intel Integrated Sensor Hub (ISH) driver for Windows 10 for Intel NUC P14E Laptop…

    Windows
  • Medium 6.7
    CVE-2023-38541

    Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software…

    Windows

Revision history

  1. #1

    Initiale Fassung

References