CVE-2023-29494
High
Description
Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability—
ProductIntel Nuc 11 Pro Kit Nuc11tnhi70z Firmware
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_11_pro_kit_nuc11tnhi70z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki70z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki30z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi30z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki50z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi50z_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi30z_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi50z_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi70z_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi3_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi5_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi7_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki3_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki5_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnki7_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi3_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi5_firmware | No range specified | — |
| intel nuc_11_pro_board_nuc11tnbi7_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi50w_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi50l_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi30l_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi70q_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi30p_firmware | No range specified | — |
| intel nuc_11_pro_kit_nuc11tnhi70l_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.