CVE-2023-25771

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-10 · updated 2026-06-17
Weakness: CWE-284

Description

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

Affected products

Intel(R) BIOS firmware: before ccsklm5v.0067 — fixed in ccsklm5v.0067
Intel Nuc 7 Enthusiast Nuc7I7Bnhxg Firmware: before bnkbl357.0089 — fixed in bnkbl357.0089
Intel Nuc 7 Enthusiast Nuc7I7Bnkq Firmware: before bnkbl357.0089 — fixed in bnkbl357.0089
Intel Nuc 7 Essential Nuc7Cjysal Firmware: before ayaplcel.0074; before jyglkcpx.0069 — fixed in ayaplcel.0074, jyglkcpx.0069
Intel Nuc 7 Essential Nuc7Cjysamn Firmware: before ayaplcel.0074; before jyglkcpx.0069 — fixed in ayaplcel.0074, jyglkcpx.0069
Intel Nuc 7 Home Nuc7I3Bnhxf Firmware: before bnkbl357.0089 — fixed in bnkbl357.0089
Intel Nuc 7 Home Nuc7I5Bnhxf Firmware: before bnkbl357.0089 — fixed in bnkbl357.0089
Intel Nuc 7 Home Nuc7I5Bnkp Firmware: before bnkbl357.0089 — fixed in bnkbl357.0089
Intel Nuc 8 Business Nuc8I7Hnkqc Firmware: before hnkbki70.0070 — fixed in hnkbki70.0070
Intel Nuc 8 Compute Element Cm8Ccb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Nuc 8 Compute Element Cm8I3Cb4N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Nuc 8 Compute Element Cm8I5Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Nuc 8 Compute Element Cm8I7Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Nuc 8 Compute Element Cm8Pcb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Nuc 8 Enthusiast Nuc8I7Behga Firmware: before becfl357.0092 — fixed in becfl357.0092
Intel Nuc 8 Enthusiast Nuc8I7Bekqa Firmware: before becfl357.0092 — fixed in becfl357.0092
Intel Nuc 8 Enthusiast Nuc8I7Hvkva Firmware: before hnkbki70.0070 — fixed in hnkbki70.0070
Intel Nuc 8 Enthusiast Nuc8I7Hvkvaw Firmware: before hnkbki70.0070 — fixed in hnkbki70.0070
Intel Nuc 8 Home Nuc8I3Behfa Firmware: before becfl357.0092 — fixed in becfl357.0092
Intel Nuc 8 Home Nuc8I3Cysm Firmware: before cycnli35.0054 — fixed in cycnli35.0054
Intel Nuc 8 Home Nuc8I3Cysn Firmware: before cycnli35.0054 — fixed in cycnli35.0054
Intel Nuc 8 Home Nuc8I5Behfa Firmware: before becfl357.0092 — fixed in becfl357.0092
Intel Nuc 8 Home Nuc8I5Bekpa Firmware: before becfl357.0092 — fixed in becfl357.0092
Intel Nuc 8 Mainstream-G Kit Nuc8I5Inh Firmware: before inwhl357.0047 — fixed in inwhl357.0047
Intel Nuc 8 Mainstream-G Kit Nuc8I7Inh Firmware: before inwhl357.0047 — fixed in inwhl357.0047
Intel Nuc 8 Mainstream-G Mini Pc Nuc8I5Inh Firmware: before inwhl357.0047 — fixed in inwhl357.0047
Intel Nuc 8 Mainstream-G Mini Pc Nuc8I7Inh Firmware: before inwhl357.0047 — fixed in inwhl357.0047
Intel Nuc 8 Pro Board Nuc8I3Pnb Firmware: before pnwhl357.0050 — fixed in pnwhl357.0050
Intel Nuc 8 Pro Kit Nuc8I3Pnh Firmware: before pnwhl357.0050 — fixed in pnwhl357.0050
Intel Nuc 8 Pro Kit Nuc8I3Pnk Firmware: before pnwhl357.0050 — fixed in pnwhl357.0050

How to fix

Upgrade to a fixed version: Intel(R) BIOS firmware ccsklm5v.0067; Intel Nuc 7 Enthusiast Nuc7I7Bnhxg Firmware bnkbl357.0089; Intel Nuc 7 Enthusiast Nuc7I7Bnkq Firmware bnkbl357.0089; Intel Nuc 7 Essential Nuc7Cjysal Firmware ayaplcel.0074, jyglkcpx.0069; Intel Nuc 7 Essential Nuc7Cjysamn Firmware ayaplcel.0074, jyglkcpx.0069; Intel Nuc 7 Home Nuc7I3Bnhxf Firmware bnkbl357.0089; Intel Nuc 7 Home Nuc7I5Bnhxf Firmware bnkbl357.0089; Intel Nuc 7 Home Nuc7I5Bnkp Firmware bnkbl357.0089; Intel Nuc 8 Business Nuc8I7Hnkqc Firmware hnkbki70.0070; Intel Nuc 8 Compute Element Cm8Ccb4R Firmware cbwhl357.0101; Intel Nuc 8 Compute Element Cm8I3Cb4N Firmware cbwhl357.0101; Intel Nuc 8 Compute Element Cm8I5Cb8N Firmware cbwhl357.0101. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-25771 or the next vulnerability affects your stack