CVE-2023-29500
Medium
Description
Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information disclosure via local access.
SeverityMedium
CVSS5.3
Exploit probability—
ProductIntel Nuc 11 Performance Kit Nuc11pahi70z Firmware
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-200Sensitive information exposure
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_11_performance_kit_nuc11pahi70z_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11pahi50z_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11pahi30z_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11pahi3_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11pahi5_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11pahi7_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11paki3_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11paki5_firmware | No range specified | — |
| intel nuc_11_performance_kit_nuc11paki7_firmware | No range specified | — |
| intel nuc_11_performance_mini_pc_nuc11paqi50wa_firmware | No range specified | — |
| intel nuc_11_performance_mini_pc_nuc11paqi70qa_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.