Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28377

Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Published

2023-11-14T19:15:21.970

Last Modified

2024-11-21T07:54:57.240

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-287
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel usb_firmware < 1.1 Yes
Hardware intel nuc_11_enthusiast_kit_nuc11phki7c - No
Hardware intel nuc_11_enthusiast_mini_pc_nuc11phki7caa - No
References