Nuc Kit Nuc6Cayh Firmware CVE-2023-32285

MEDIUM

Improper Access Control (CWE-284)

2023-08-11 secure@intel.com

Denial Of Service Intel Authentication Bypass Nuc Kit Nuc6Cayh Firmware Nuc Kit Nuc6Cays Firmware Nuc Mini Pc Nuc7I3Bnhxf Firmware Nuc Mini Pc Nuc7I3Bnk Firmware Nuc Mini Pc Nuc7I3Bnh Firmware Nuc Mini Pc Nuc7I3Bnb Firmware Nuc Mini Pc Nuc7I5Bnhx1 Firmware Nuc Mini Pc Nuc7I5Bnh Firmware Nuc Mini Pc Nuc7I5Bnk Firmware Nuc Mini Pc Nuc7I5Bnhxf Firmware Nuc Mini Pc Nuc7I5Bnkp Firmware Nuc Mini Pc Nuc7I5Bnb Firmware Nuc Mini Pc Nuc7I7Bnh Firmware Nuc Mini Pc Nuc7I7Bnhx1 Firmware Nuc Mini Pc Nuc7I7Bnhxg Firmware Nuc Mini Pc Nuc7I3Bnhx1 Firmware Nuc Mini Pc Nuc7I7Bnkq Firmware Nuc Mini Pc Nuc7I7Bnb Firmware Nuc Kit Nuc7I3Bnhxf Firmware Nuc Kit Nuc7I3Bnk Firmware Nuc Kit Nuc7I3Bnh Firmware Nuc Kit Nuc7I3Bnb Firmware Nuc Kit Nuc7I5Bnhx1 Firmware Nuc Kit Nuc7I5Bnh Firmware Nuc Kit Nuc7I5Bnk Firmware Nuc Kit Nuc7I5Bnhxf Firmware Nuc Kit Nuc7I5Bnkp Firmware Nuc Kit Nuc7I5Bnb Firmware Nuc Kit Nuc7I7Bnh Firmware Nuc Kit Nuc7I7Bnhx1 Firmware Nuc Kit Nuc7I7Bnhxg Firmware Nuc Kit Nuc7I3Bnhx1 Firmware Nuc Kit Nuc7I7Bnkq Firmware Nuc Kit Nuc7I7Bnb Firmware Nuc Enthusiast Nuc7I3Bnhxf Firmware Nuc Enthusiast Nuc7I3Bnk Firmware Nuc Enthusiast Nuc7I3Bnh Firmware Nuc Enthusiast Nuc7I3Bnb Firmware Nuc Enthusiast Nuc7I5Bnhx1 Firmware Nuc Enthusiast Nuc7I5Bnh Firmware Nuc Enthusiast Nuc7I5Bnk Firmware Nuc Enthusiast Nuc7I5Bnhxf Firmware Nuc Enthusiast Nuc7I5Bnkp Firmware Nuc Enthusiast Nuc7I5Bnb Firmware Nuc Enthusiast Nuc7I7Bnh Firmware Nuc Enthusiast Nuc7I7Bnhx1 Firmware Nuc Enthusiast Nuc7I7Bnhxg Firmware Nuc Enthusiast Nuc7I3Bnhx1 Firmware Nuc Enthusiast Nuc7I7Bnkq Firmware Nuc Enthusiast Nuc7I7Bnb Firmware Nuc Board Nuc7I3Bnhxf Firmware Nuc Board Nuc7I3Bnk Firmware Nuc Board Nuc7I3Bnh Firmware Nuc Board Nuc7I3Bnb Firmware Nuc Board Nuc7I5Bnhx1 Firmware Nuc Board Nuc7I5Bnh Firmware Nuc Board Nuc7I5Bnk Firmware Nuc Board Nuc7I5Bnhxf Firmware Nuc Board Nuc7I5Bnkp Firmware Nuc Board Nuc7I5Bnb Firmware Nuc Board Nuc7I7Bnh Firmware Nuc Board Nuc7I7Bnhx1 Firmware Nuc Board Nuc7I7Bnhxg Firmware Nuc Board Nuc7I3Bnhx1 Firmware Nuc Board Nuc7I7Bnkq Firmware Nuc Board Nuc7I7Bnb Firmware Compute Element Stk2Mv64Cc Firmware

4.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 11, 2023 - 03:15 nvd

MEDIUM 4.4

DescriptionNVD

Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

AnalysisAI

Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. Affected products include: Intel Nuc Kit Nuc6Cayh Firmware, Intel Nuc Kit Nuc6Cays Firmware, Intel Nuc Mini Pc Nuc7I3Bnhxf Firmware, Intel Nuc Mini Pc Nuc7I3Bnk Firmware, Intel Nuc Mini Pc Nuc7I3Bnh Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc Kit Nuc6Cayh Firmware

View all

CVE-2023-34438 HIGH This Week

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privil

CVE-2020-0600 HIGH This Week

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable esc

CVE-2020-0530 HIGH This Week

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalati

CVE-2023-34086 MEDIUM This Month

Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalatio

CVE-2023-32617 MEDIUM This Month

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware m

CVE-2020-0526 MEDIUM This Month

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p

CVE-2021-33086 MEDIUM This Month

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of s

Same weakness CWE-284 – Improper Access Control

View all

CVE-2012-4681 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2012-5076 CRITICAL POC

CVE-2014-3120 HIGH POC

CVE-2013-2423 LOW POC

CVE-2016-3427 CRITICAL

CVE-2025-12480 CRITICAL POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2023-32285 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy