1. Home
  2. CVE Database
  3. CVE-2023-32617
HIGH · 8.2

CVE-2023-32617

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via loc...

Vulnerability Description

Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelNuc Kit Nuc7I7Bnhx1 Firmware-
IntelNuc Kit Nuc7I7Bnhx1-
IntelNuc 7 Home Nuc7I5Bnkp Firmware-
IntelNuc 7 Home Nuc7I5Bnkp-
IntelNuc 7 Home Nuc7I3Bnhxf Firmware-
IntelNuc 7 Home Nuc7I3Bnhxf-
IntelNuc 7 Enthusiast Nuc7I7Bnkq Firmware-
IntelNuc 7 Enthusiast Nuc7I7Bnkq-
IntelNuc Kit Nuc7I3Bnhx1 Firmware-
IntelNuc Kit Nuc7I3Bnhx1-
IntelNuc 7 Enthusiast Nuc7I7Bnhxg Firmware-
IntelNuc 7 Enthusiast Nuc7I7Bnhxg-
IntelNuc 7 Home Nuc7I5Bnhxf Firmware-
IntelNuc 7 Home Nuc7I5Bnhxf-
IntelNuc Kit Nuc7I5Bnhx1 Firmware-
IntelNuc Kit Nuc7I5Bnhx1-
IntelNuc Board Nuc7I7Bnb Firmware-
IntelNuc Board Nuc7I7Bnb-
IntelNuc Board Nuc7I5Bnb Firmware-
IntelNuc Board Nuc7I5Bnb-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2023-32617?

CVE-2023-32617 is a vulnerability with a CVSS score of 8.2 (HIGH). Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via loc...

How severe is CVE-2023-32617?

CVE-2023-32617 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-32617?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc Kit Nuc7I7Bnhx1 Firmware, Intel Nuc Kit Nuc7I7Bnhx1, Intel Nuc 7 Home Nuc7I5Bnkp Firmware, Intel Nuc 7 Home Nuc7I5Bnkp, Intel Nuc 7 Home Nuc7I3Bnhxf Firmware.