Skip to main content

Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware CVE-2023-27887

MEDIUM
Improper Initialization (CWE-665)
2023-08-11 secure@intel.com
Information Disclosure Intel Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware Nuc 11 Pro Kit Nuc11Tnki70Z Firmware Nuc 11 Pro Kit Nuc11Tnki30Z Firmware Nuc 11 Pro Kit Nuc11Tnhi30Z Firmware Nuc 11 Pro Kit Nuc11Tnki50Z Firmware Nuc 11 Pro Kit Nuc11Tnhi50Z Firmware Nuc 11 Pro Board Nuc11Tnbi30Z Firmware Nuc 11 Pro Board Nuc11Tnbi50Z Firmware Nuc 11 Pro Board Nuc11Tnbi70Z Firmware Nuc 11 Pro Kit Nuc11Tnhi3 Firmware Nuc 11 Pro Kit Nuc11Tnhi5 Firmware Nuc 11 Pro Kit Nuc11Tnhi7 Firmware Nuc 11 Pro Kit Nuc11Tnki3 Firmware Nuc 11 Pro Kit Nuc11Tnki5 Firmware Nuc 11 Pro Kit Nuc11Tnki7 Firmware Nuc 11 Pro Board Nuc11Tnbi3 Firmware Nuc 11 Pro Board Nuc11Tnbi5 Firmware Nuc 11 Pro Board Nuc11Tnbi7 Firmware Nuc 11 Pro Kit Nuc11Tnhi50W Firmware Nuc 11 Pro Kit Nuc11Tnhi50L Firmware Nuc 11 Pro Kit Nuc11Tnhi30L Firmware Nuc 11 Pro Kit Nuc11Tnhi70Q Firmware Nuc 11 Pro Kit Nuc11Tnhi30P Firmware Nuc 11 Pro Kit Nuc11Tnhi70L Firmware
4.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.4 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 11, 2023 - 03:15 nvd
MEDIUM 4.4

DescriptionNVD

Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access.

AnalysisAI

Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-665. Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access. Affected products include: Intel Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnki70Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnki30Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnhi30Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnki50Z Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware

View all
CVE-2022-37334 HIGH
7.8 Nov 11

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version
CVE-2023-29494 MEDIUM
6.7 Aug 11

Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable esca
CVE-2022-24382 MEDIUM
6.7 May 12

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio
CVE-2022-24297 MEDIUM
6.7 May 12

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala
CVE-2022-21237 MEDIUM
6.7 May 12

Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o
CVE-2023-40540 MEDIUM
4.4 Nov 14

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t
CVE-2023-22444 MEDIUM
4.4 Aug 11

Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Pe

Same weakness CWE-665 – Improper Initialization

View all
CVE-2022-0847 HIGH POC
7.8
CVE-2013-1675 MEDIUM POC
6.5
CVE-2023-1719 CRITICAL POC
9.8
CVE-2022-36061 CRITICAL POC
9.8
CVE-2022-37128 CRITICAL POC
9.8
CVE-2019-20063 HIGH POC
8.8
CVE-2017-13715 CRITICAL
9.8
CVE-2017-14609 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-27887 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy