CVE-2023-22312

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-10 · updated 2026-06-17
Weakness: CWE-284

Description

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Lapkc51E Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Lapkc71E Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Lapkc71F Firmware: before kctgl357.0044 — fixed in kctgl357.0044
Intel Nuc11Btmi7 Firmware: before dbtgl579.0065 — fixed in dbtgl579.0065
Intel Nuc11Btmi9 Firmware: before dbtgl579.0065 — fixed in dbtgl579.0065
Intel Nuc11Dbbi7 Firmware: before dbtgl579.0065 — fixed in dbtgl579.0065
Intel Nuc11Dbbi9 Firmware: before dbtgl579.0065 — fixed in dbtgl579.0065
Intel Nuc 11 Compute Element Cm11Ebc4W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Nuc 11 Compute Element Cm11Ebi38W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Nuc 11 Compute Element Cm11Ebi58W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Nuc 11 Compute Element Cm11Ebi716W Firmware: before ebtgl357.0071 — fixed in ebtgl357.0071
Intel Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware: before phtgl579.0071 — fixed in phtgl579.0071
Intel Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware: before phtgl579.0071 — fixed in phtgl579.0071
Intel Nuc 11 Performance Kit Nuc11Pahi30Z Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Pahi3 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Pahi50Z Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Pahi5 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Pahi70Z Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Pahi7 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Paki3 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Paki5 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Kit Nuc11Paki7 Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Mini Pc Nuc11Paqi50Wa Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Performance Mini Pc Nuc11Paqi70Qa Firmware: before patgl357.0050 — fixed in patgl357.0050
Intel Nuc 11 Pro Board Nuc11Tnbv5 Firmware: before tntglv57.0071 — fixed in tntglv57.0071
Intel Nuc 11 Pro Board Nuc11Tnbv7 Firmware: before tntglv57.0071 — fixed in tntglv57.0071
Intel Nuc 11 Pro Kit Nuc11Tnhv50L Firmware: before tntglv57.0071 — fixed in tntglv57.0071
Intel Nuc 11 Pro Kit Nuc11Tnhv5 Firmware: before tntglv57.0071 — fixed in tntglv57.0071
Intel Nuc 11 Pro Kit Nuc11Tnhv70L Firmware: before tntglv57.0071 — fixed in tntglv57.0071
Intel Nuc 11 Pro Kit Nuc11Tnhv7 Firmware: before tntglv57.0071 — fixed in tntglv57.0071

How to fix

Upgrade to a fixed version: Intel Lapkc51E Firmware kctgl357.0044; Intel Lapkc71E Firmware kctgl357.0044; Intel Lapkc71F Firmware kctgl357.0044; Intel Nuc11Btmi7 Firmware dbtgl579.0065; Intel Nuc11Btmi9 Firmware dbtgl579.0065; Intel Nuc11Dbbi7 Firmware dbtgl579.0065; Intel Nuc11Dbbi9 Firmware dbtgl579.0065; Intel Nuc 11 Compute Element Cm11Ebc4W Firmware ebtgl357.0071; Intel Nuc 11 Compute Element Cm11Ebi38W Firmware ebtgl357.0071; Intel Nuc 11 Compute Element Cm11Ebi58W Firmware ebtgl357.0071; Intel Nuc 11 Compute Element Cm11Ebi716W Firmware ebtgl357.0071; Intel Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware phtgl579.0071. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-22312 or the next vulnerability affects your stack