HIGH✓ PATCH🇬🇧 English

CVE-2023-28738

CVSS 7.5v3.1pub. 2024-01-19upd. 2024-11-21

Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Intel Nuc 7 Essential Nuc7cjysamn

    HW
    Intel
    wszystkie wersje

  • Intel Nuc 7 Essential Nuc7cjysamn Firmware

    OS
    Intel
    jyglkcpx.0071

  • Intel Nuc Kit Nuc7cjyh

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7cjyh Firmware

    OS
    Intel
    jyglkcpx.0071

  • Intel Nuc Kit Nuc7cjyhn

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7cjyhn Firmware

    OS
    Intel
    jyglkcpx.0071

  • Intel Nuc Kit Nuc7cjysal

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7cjysal Firmware

    OS
    Intel
    jyglkcpx.0071

  • Intel Nuc Kit Nuc7pjyh

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7pjyh Firmware

    OS
    Intel
    jyglkcpx.0071

  • Intel Nuc Kit Nuc7pjyhn

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7pjyhn Firmware

    OS
    Intel
    jyglkcpx.0071
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2023-42429HIGH7.5ten sam produkt

Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable...

CVE-2020-0600HIGH7.8ten sam produkt

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially ...

CVE-2020-0530HIGH7.8ten sam produkt

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enabl...

CVE-2019-11094HIGH7.8ten sam produkt

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to pote...

CVE-2018-12176HIGH8.2ten sam produkt

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute ar...