Skip to main content

Nuc 8 Rugged Kit Nuc8Cchkr Firmware CVE-2023-22312

HIGH
Improper Access Control (CWE-284)
2023-05-10 secure@intel.com
Authentication Bypass Privilege Escalation Intel Nuc 8 Rugged Kit Nuc8Cchkr Firmware Nuc Board Nuc8Cchb Firmware Nuc M15 Laptop Kit Lapbc510 Firmware Nuc M15 Laptop Kit Lapbc710 Firmware Nuc 11 Compute Element Cm11Ebi38W Firmware Nuc 11 Compute Element Cm11Ebi58W Firmware Nuc 11 Compute Element Cm11Ebi716W Firmware Nuc 11 Performance Kit Nuc11Pahi3 Firmware Nuc 11 Performance Kit Nuc11Pahi5 Firmware Nuc 11 Performance Kit Nuc11Pahi7 Firmware Nuc 11 Performance Kit Nuc11Paki3 Firmware Nuc 11 Performance Kit Nuc11Paki5 Firmware Nuc 11 Performance Kit Nuc11Paki7 Firmware Nuc 11 Performance Mini Pc Nuc11Paqi50Wa Firmware Nuc 11 Performance Mini Pc Nuc11Paqi70Qa Firmware Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware Nuc 11 Compute Element Cm11Ebc4W Firmware Lapkc71F Firmware Lapkc71E Firmware Lapkc51E Firmware Nuc11Dbbi9 Firmware Nuc11Dbbi7 Firmware Nuc11Btmi7 Firmware Nuc11Btmi9 Firmware Nuc 8 Rugged Kit Nuc8Cchkrn Firmware Nuc 8 Rugged Board Nuc8Cchbn Firmware Nuc 11 Performance Kit Nuc11Pahi30Z Firmware Nuc 11 Performance Kit Nuc11Pahi50Z Firmware Nuc 11 Performance Kit Nuc11Pahi70Z Firmware Nuc 11 Pro Kit Nuc11Tnkv50Z Firmware Nuc 11 Pro Kit Nuc11Tnhv70L Firmware Nuc 11 Pro Kit Nuc11Tnhv50L Firmware Nuc 11 Pro Board Nuc11Tnbv7 Firmware Nuc 11 Pro Kit Nuc11Tnkv5 Firmware Nuc 11 Pro Kit Nuc11Tnkv7 Firmware Nuc 11 Pro Kit Nuc11Tnhv5 Firmware Nuc 11 Pro Mini Pc Nuc11Tnkv5 Firmware Nuc 11 Pro Mini Pc Nuc11Tnkv7 Firmware Nuc 11 Pro Kit Nuc11Tnhv7 Firmware Nuc 11 Pro Board Nuc11Tnbv5 Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 10, 2023 - 14:15 nvd
HIGH 7.8

DescriptionNVD

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Nuc 11 Performance Kit Nuc11Pahi70Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi50Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi30Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi3 Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi5 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc 8 Rugged Kit Nuc8Cchkr Firmware

View all
CVE-2022-26124 HIGH
7.8 Nov 11

Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged
CVE-2020-24525 HIGH
7.8 Nov 12

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti
CVE-2020-12336 HIGH
7.8 Nov 12

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potential
CVE-2020-0600 HIGH
7.8 Apr 15

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable esc
CVE-2020-0530 HIGH
7.8 Mar 12

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalati
CVE-2023-32617 MEDIUM
6.7 Aug 11

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware m
CVE-2021-0067 MEDIUM
6.7 Jun 09

 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enabl
CVE-2021-0054 MEDIUM
6.7 Jun 09

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable
CVE-2020-12337 MEDIUM
6.7 Nov 12

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala
CVE-2020-0526 MEDIUM
6.7 Mar 12

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p
CVE-2021-33086 MEDIUM
5.5 Nov 17

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of s

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2023-22312 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy