CVE-2024-34163 — HIGH (7.5)

Q: What is CVE-2024-34163?

CVE-2024-34163 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.

Q: How severe is CVE-2024-34163?

CVE-2024-34163 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2024-34163?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc X15 Laptop Kit Lapbc510 Firmware, Intel Nuc X15 Laptop Kit Lapbc510, Intel Nuc X15 Laptop Kit Lapbc710 Firmware, Intel Nuc X15 Laptop Kit Lapbc710, Intel Nuc X15 Laptop Kit Lapac71G Firmware.

Vulnerability Description

Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Intel	Nuc X15 Laptop Kit Lapbc510 Firmware	< 0083
Intel	Nuc X15 Laptop Kit Lapbc510	-
Intel	Nuc X15 Laptop Kit Lapbc710 Firmware	< 0083
Intel	Nuc X15 Laptop Kit Lapbc710	-
Intel	Nuc X15 Laptop Kit Lapac71G Firmware	< 0065
Intel	Nuc X15 Laptop Kit Lapac71G	-
Intel	Nuc X15 Laptop Kit Lapac71H Firmware	< 0065
Intel	Nuc X15 Laptop Kit Lapac71H	-
Intel	Nuc X15 Laptop Kit Lapkc51E Firmware	< 0048
Intel	Nuc X15 Laptop Kit Lapkc51E	-
Intel	Nuc X15 Laptop Kit Lapkc71E Firmware	< 0048
Intel	Nuc X15 Laptop Kit Lapkc71E	-
Intel	Nuc X15 Laptop Kit Lapkc71F Firmware	< 0048
Intel	Nuc X15 Laptop Kit Lapkc71F	-
Intel	Nuc X15 Laptop Kit Laprc510 Firmware	< 0066
Intel	Nuc X15 Laptop Kit Laprc510	-
Intel	Nuc X15 Laptop Kit Laprc710 Firmware	< 0066
Intel	Nuc X15 Laptop Kit Laprc710	-

Related Weaknesses (CWE)

CWE-20

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01022.Vendor Advisory

FAQ

What is CVE-2024-34163?

CVE-2024-34163 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.

How severe is CVE-2024-34163?

CVE-2024-34163 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-34163?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc X15 Laptop Kit Lapbc510 Firmware, Intel Nuc X15 Laptop Kit Lapbc510, Intel Nuc X15 Laptop Kit Lapbc710 Firmware, Intel Nuc X15 Laptop Kit Lapbc710, Intel Nuc X15 Laptop Kit Lapac71G Firmware.