Skip to main content

Nuc 11 Performance Kit Nuc11Pahi70Z Firmware CVE-2023-22312

HIGH
Improper Access Control (CWE-284)
2023-05-10 secure@intel.com
Privilege Escalation Intel Authentication Bypass Nuc 11 Performance Kit Nuc11Pahi70Z Firmware Nuc 11 Performance Kit Nuc11Pahi50Z Firmware Nuc 11 Performance Kit Nuc11Pahi30Z Firmware Nuc 11 Performance Kit Nuc11Pahi3 Firmware Nuc 11 Performance Kit Nuc11Pahi5 Firmware Nuc 11 Performance Kit Nuc11Pahi7 Firmware Nuc 11 Performance Kit Nuc11Paki3 Firmware Nuc 11 Performance Kit Nuc11Paki5 Firmware Nuc 11 Performance Kit Nuc11Paki7 Firmware Nuc 11 Performance Mini Pc Nuc11Paqi50Wa Firmware Nuc 11 Performance Mini Pc Nuc11Paqi70Qa Firmware Nuc 11 Compute Element Cm11Ebi38W Firmware Nuc 11 Compute Element Cm11Ebi58W Firmware Nuc 11 Compute Element Cm11Ebi716W Firmware Nuc 11 Compute Element Cm11Ebc4W Firmware Nuc M15 Laptop Kit Lapbc710 Firmware Nuc M15 Laptop Kit Lapbc510 Firmware Lapkc51E Firmware Lapkc71E Firmware Lapkc71F Firmware Nuc11Btmi7 Firmware Nuc11Dbbi7 Firmware Nuc11Btmi9 Firmware Nuc11Dbbi9 Firmware Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware Nuc Board Nuc8Cchb Firmware Nuc 8 Rugged Board Nuc8Cchbn Firmware Nuc 8 Rugged Kit Nuc8Cchkrn Firmware Nuc 8 Rugged Kit Nuc8Cchkr Firmware Nuc 11 Pro Kit Nuc11Tnkv50Z Firmware Nuc 11 Pro Kit Nuc11Tnhv70L Firmware Nuc 11 Pro Kit Nuc11Tnhv50L Firmware Nuc 11 Pro Board Nuc11Tnbv7 Firmware Nuc 11 Pro Kit Nuc11Tnkv5 Firmware Nuc 11 Pro Kit Nuc11Tnkv7 Firmware Nuc 11 Pro Kit Nuc11Tnhv5 Firmware Nuc 11 Pro Mini Pc Nuc11Tnkv5 Firmware Nuc 11 Pro Mini Pc Nuc11Tnkv7 Firmware Nuc 11 Pro Kit Nuc11Tnhv7 Firmware Nuc 11 Pro Board Nuc11Tnbv5 Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 10, 2023 - 14:15 nvd
HIGH 7.8

DescriptionNVD

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Nuc 11 Performance Kit Nuc11Pahi70Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi50Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi30Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi3 Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi5 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc 11 Performance Kit Nuc11Pahi70Z Firmware

View all
CVE-2023-22449 MEDIUM
6.7 Aug 11

Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalatio
CVE-2022-33176 MEDIUM
6.7 Nov 11

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Min
CVE-2023-34349 MEDIUM
6.4 Aug 11

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privil
CVE-2023-40540 MEDIUM
4.4 Nov 14

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t
CVE-2023-29500 MEDIUM
4.4 Aug 11

Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege
CVE-2023-22444 MEDIUM
4.4 Aug 11

Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Pe
CVE-2023-22356 MEDIUM
4.4 Aug 11

Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information
CVE-2023-22330 MEDIUM
4.4 Aug 11

Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable infor

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2023-22312 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy