CVE-2023-32617
High
Description
Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS8.2
Exploit probability—
ProductIntel Compute Stick Stk2mv64cc Firmware
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel compute_stick_stk2mv64cc_firmware | No range specified | — |
| intel nuc_kit_nuc7i7bnhx1_firmware | No range specified | — |
| intel nuc_7_home_nuc7i5bnkp_firmware | No range specified | — |
| intel nuc_7_home_nuc7i3bnhxf_firmware | No range specified | — |
| intel nuc_7_enthusiast_nuc7i7bnkq_firmware | No range specified | — |
| intel nuc_kit_nuc7i3bnhx1_firmware | No range specified | — |
| intel nuc_7_enthusiast_nuc7i7bnhxg_firmware | No range specified | — |
| intel nuc_7_home_nuc7i5bnhxf_firmware | No range specified | — |
| intel nuc_kit_nuc7i5bnhx1_firmware | No range specified | — |
| intel nuc_board_nuc7i7bnb_firmware | No range specified | — |
| intel nuc_board_nuc7i5bnb_firmware | No range specified | — |
| intel nuc_board_nuc7i3bnb_firmware | No range specified | — |
| intel nuc_kit_nuc7i5bnh_firmware | No range specified | — |
| intel nuc_kit_nuc7i3bnk_firmware | No range specified | — |
| intel nuc_kit_nuc7i5bnk_firmware | No range specified | — |
| intel nuc_kit_nuc7i7bnh_firmware | No range specified | — |
| intel nuc_kit_nuc7i3bnh_firmware | No range specified | — |
| intel nuc_8_rugged_kit_nuc8cchkrn_firmware | No range specified | — |
| intel nuc_8_rugged_board_nuc8cchbn_firmware | No range specified | — |
| intel nuc_8_rugged_kit_nuc8cchkr_firmware | No range specified | — |
| intel nuc_board_nuc8cchb_firmware | No range specified | — |
| intel nuc_kit_nuc6cayh_firmware | No range specified | — |
| intel nuc_kit_nuc6cays_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.