CVE-2023-38587

Vulnerability

Improper input validation in some Intel NUC BIOS firmware [1] may allow a privileged user to potentially enable escalation of privilege via local access. The affected products include multiple Intel NUC models and their BIOS versions, as listed in the Intel advisory [1].

Exploitation

An attacker must have local access to the system and possess elevated privileges (such as administrative or root access) to exploit this vulnerability [1]. The specific sequence involves triggering the improper input validation within the BIOS firmware interface [1].

Impact

A successful exploit could allow the attacker to escalate their privileges further within the system, potentially gaining full control over the affected device [1]. This can lead to compromise of confidentiality, integrity, and availability of the system [1].

Mitigation

Intel has released BIOS updates to address this vulnerability [1]. Affected users should update their Intel NUC system BIOS to the fixed version provided by Intel [1]. No workarounds were mentioned in the advisory [1].