What’s Vulnerable › Vulnerabilities

CVE-2023-29494

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-11 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Nuc 11 Pro Board Nuc11Tnbi30Z Firmware: all versions
• Intel Nuc 11 Pro Board Nuc11Tnbi3 Firmware: all versions
• Intel Nuc 11 Pro Board Nuc11Tnbi50Z Firmware: all versions
• Intel Nuc 11 Pro Board Nuc11Tnbi5 Firmware: all versions
• Intel Nuc 11 Pro Board Nuc11Tnbi70Z Firmware: all versions
• Intel Nuc 11 Pro Board Nuc11Tnbi7 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi30L Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi30P Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi30Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi3 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi50L Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi50W Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi50Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi5 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi70L Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi70Q Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnhi7 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki30Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki3 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki50Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki5 Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki70Z Firmware: all versions
• Intel Nuc 11 Pro Kit Nuc11Tnki7 Firmware: all versions

References

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

Get alerted when CVE-2023-29494 or the next vulnerability affects your stack