CVSS: 7.3EPSS: 0%CPEs: 5EXPL: 0CVE-2023-32278
https://notcve.org/view.php?id=CVE-2023-32278
Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for Intel(R) NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via local access. Path Transversal en Intel(R) NUC Uniwill Service Driver para Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver: el software de instalación anterior a la versión 1.0.1.7 para Intel(R) NUC Software Studio puede permitir que un usuario autenticado potencialmente permitir la escalada de privilegios a través del acceso local. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-249: DEPRECATED: Often Misused: Path Manipulation •
CVSS: 6.4EPSS: 0%CPEs: 362EXPL: 0CVE-2023-34349
https://notcve.org/view.php?id=CVE-2023-34349
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-421: Race Condition During Access to Alternate Channel •
CVSS: 6.0EPSS: 0%CPEs: 436EXPL: 0CVE-2023-22356
https://notcve.org/view.php?id=CVE-2023-22356
Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. La inicialización incorrecta en Intel(R) NUC BIOS firmware pueden permitir que un usuario privilegiado habilite potencialmente la divulgación de información a través del acceso local. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html • CWE-665: Improper Initialization •
CVSS: 6.0EPSS: 0%CPEs: 222EXPL: 0CVE-2023-22444
https://notcve.org/view.php?id=CVE-2023-22444
Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board and Intel(R) NUC Pro Mini PC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html • CWE-665: Improper Initialization •
CVSS: 7.5EPSS: 0%CPEs: 324EXPL: 0CVE-2023-22449
https://notcve.org/view.php?id=CVE-2023-22449
Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html • CWE-20: Improper Input Validation •