CVE-2023-34438 — HIGH (7.5)

Vulnerability Description

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Intel	Nuc Rugged Kit Nuc8Cchb Firmware	-
Intel	Nuc Rugged Kit Nuc8Cchb	-
Intel	Nuc Rugged Kit Nuc8Cchbn Firmware	-
Intel	Nuc Rugged Kit Nuc8Cchbn	-
Intel	Nuc Rugged Kit Nuc8Cchkrn Firmware	-
Intel	Nuc Rugged Kit Nuc8Cchkrn	-
Intel	Nuc Rugged Kit Nuc8Cchkr Firmware	-
Intel	Nuc Rugged Kit Nuc8Cchkr	-
Intel	Nuc Kit Nuc6Cayh Firmware	-
Intel	Nuc Kit Nuc6Cayh	-
Intel	Nuc Kit Nuc6Cays Firmware	-
Intel	Nuc Kit Nuc6Cays	-
Intel	Nuc Mini Pc Nuc7I3Bnhxf Firmware	-
Intel	Nuc Mini Pc Nuc7I3Bnhxf	-
Intel	Nuc Mini Pc Nuc7I3Bnk Firmware	-
Intel	Nuc Mini Pc Nuc7I3Bnk	-
Intel	Nuc Mini Pc Nuc7I3Bnh Firmware	-
Intel	Nuc Mini Pc Nuc7I3Bnh	-
Intel	Nuc Mini Pc Nuc7I3Bnb Firmware	-
Intel	Nuc Mini Pc Nuc7I3Bnb	-

Related Weaknesses (CWE)

CWE-362 CWE-421

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.hPatchVendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.hPatchVendor Advisory

FAQ

What is CVE-2023-34438?

CVE-2023-34438 is a vulnerability with a CVSS score of 7.5 (HIGH). Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

How severe is CVE-2023-34438?

CVE-2023-34438 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-34438?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc Rugged Kit Nuc8Cchb Firmware, Intel Nuc Rugged Kit Nuc8Cchb, Intel Nuc Rugged Kit Nuc8Cchbn Firmware, Intel Nuc Rugged Kit Nuc8Cchbn, Intel Nuc Rugged Kit Nuc8Cchkrn Firmware.