Input validation error in Intel products - CVE-2023-29494

Vulnerability identifier: #VU79572

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-29494

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input. A local user can execute arbitrary code with elevated privileges.

Intel NUC 11 Pro Kit NUC11TNKi3
Intel NUC 11 Pro Kit NUC11TNHi70L
Intel NUC 11 Pro Kit NUC11TNHi30P
Intel NUC 11 Pro Kit NUC11TNHi70Q
Intel NUC 11 Pro Kit NUC11TNHi30L
Intel NUC 11 Pro Kit NUC11TNHi50L
Intel NUC 11 Pro Kit NUC11TNHi50W
Intel NUC 11 Pro Board NUC11TNBi7
Intel NUC 11 Pro Board NUC11TNBi5
Intel NUC 11 Pro Board NUC11TNBi3
Intel NUC 11 Pro Kit NUC11TNKi7
Intel NUC 11 Pro Kit NUC11TNKi5
Intel NUC 11 Pro Kit NUC11TNHi70Z
Intel NUC 11 Pro Kit NUC11TNHi7
Intel NUC 11 Pro Kit NUC11TNHi5
Intel NUC 11 Pro Kit NUC11TNHi3
Intel NUC 11 Pro Board NUC11TNBi70Z
Intel NUC 11 Pro Board NUC11TNBi50Z
Intel NUC 11 Pro Board NUC11TNBi30Z
Intel NUC 11 Pro Kit NUC11TNHi50Z
Intel NUC 11 Pro Kit NUC11TNKi50Z
Intel NUC 11 Pro Kit NUC11TNHi30Z
Intel NUC 11 Pro Kit NUC11TNKi30Z
Intel NUC 11 Pro Kit NUC11TNKi70Z

Install updates from vendor's website.

Intel NUC 11 Pro Kit NUC11TNKi3 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi70L - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi30P - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi70Q - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi30L - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi50L - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi50W - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi7 - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi5 - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi3 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNKi7 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNKi5 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi70Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi7 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi5 - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi3 - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi70Z - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi50Z - update to TNTGL357
Intel NUC 11 Pro Board NUC11TNBi30Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi50Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNKi50Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNHi30Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNKi30Z - update to TNTGL357
Intel NUC 11 Pro Kit NUC11TNKi70Z - update to TNTGL357

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

• Multiple vulnerabilities in Intel NUC Kit and Mini PC BIOS firmware