CVE Vulnerabilities

CVE-2023-34349

Race Condition During Access to Alternate Channel

Published: Aug 11, 2023 | Modified: Nov 21, 2024
CVSS 3.x
6.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Weakness

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

Affected Software

Name Vendor Start Version End Version
Nuc_performance_kit_and_mini_pc_nuc10i3fnh_firmware Intel - (including) - (including)

References