CVE-2023-34438
11.08.2023, 03:15
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
| Vendor | Product | Version |
|---|---|---|
| intel | nuc_rugged_kit_nuc8cchb_firmware | - |
| intel | nuc_rugged_kit_nuc8cchbn_firmware | - |
| intel | nuc_rugged_kit_nuc8cchkrn_firmware | - |
| intel | nuc_rugged_kit_nuc8cchkr_firmware | - |
| intel | nuc_kit_nuc6cayh_firmware | - |
| intel | nuc_kit_nuc6cays_firmware | - |
| intel | nuc_mini_pc_nuc7i3bnhxf_firmware | - |
| intel | nuc_mini_pc_nuc7i3bnk_firmware | - |
| intel | nuc_mini_pc_nuc7i3bnh_firmware | - |
| intel | nuc_mini_pc_nuc7i3bnb_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnhx1_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnh_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnk_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnhxf_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnkp_firmware | - |
| intel | nuc_mini_pc_nuc7i5bnb_firmware | - |
| intel | nuc_mini_pc_nuc7i7bnh_firmware | - |
| intel | nuc_mini_pc_nuc7i7bnhx1_firmware | - |
| intel | nuc_mini_pc_nuc7i7bnhxg_firmware | - |
| intel | nuc_mini_pc_nuc7i3bnhx1_firmware | - |
| intel | nuc_mini_pc_nuc7i7bnkq_firmware | - |
| intel | nuc_mini_pc_nuc7i7bnb_firmware | - |
| intel | nuc_kit_nuc7i3bnhxf_firmware | - |
| intel | nuc_kit_nuc7i3bnk_firmware | - |
| intel | nuc_kit_nuc7i3bnh_firmware | - |
| intel | nuc_kit_nuc7i3bnb_firmware | - |
| intel | nuc_kit_nuc7i5bnhx1_firmware | - |
| intel | nuc_kit_nuc7i5bnh_firmware | - |
| intel | nuc_kit_nuc7i5bnk_firmware | - |
| intel | nuc_kit_nuc7i5bnhxf_firmware | - |
| intel | nuc_kit_nuc7i5bnkp_firmware | - |
| intel | nuc_kit_nuc7i5bnb_firmware | - |
| intel | nuc_kit_nuc7i7bnh_firmware | - |
| intel | nuc_kit_nuc7i7bnhx1_firmware | - |
| intel | nuc_kit_nuc7i7bnhxg_firmware | - |
| intel | nuc_kit_nuc7i3bnhx1_firmware | - |
| intel | nuc_kit_nuc7i7bnkq_firmware | - |
| intel | nuc_kit_nuc7i7bnb_firmware | - |
| intel | nuc_enthusiast_nuc7i3bnhxf_firmware | - |
| intel | nuc_enthusiast_nuc7i3bnk_firmware | - |
| intel | nuc_enthusiast_nuc7i3bnh_firmware | - |
| intel | nuc_enthusiast_nuc7i3bnb_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnhx1_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnh_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnk_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnhxf_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnkp_firmware | - |
| intel | nuc_enthusiast_nuc7i5bnb_firmware | - |
| intel | nuc_enthusiast_nuc7i7bnh_firmware | - |
| intel | nuc_enthusiast_nuc7i7bnhx1_firmware | - |
| intel | nuc_enthusiast_nuc7i7bnhxg_firmware | - |
| intel | nuc_enthusiast_nuc7i3bnhx1_firmware | - |
| intel | nuc_enthusiast_nuc7i7bnkq_firmware | - |
| intel | nuc_enthusiast_nuc7i7bnb_firmware | - |
| intel | nuc_board_nuc7i3bnhxf_firmware | - |
| intel | nuc_board_nuc7i3bnk_firmware | - |
| intel | nuc_board_nuc7i3bnh_firmware | - |
| intel | nuc_board_nuc7i3bnb_firmware | - |
| intel | nuc_board_nuc7i5bnhx1_firmware | - |
| intel | nuc_board_nuc7i5bnh_firmware | - |
| intel | nuc_board_nuc7i5bnk_firmware | - |
| intel | nuc_board_nuc7i5bnhxf_firmware | - |
| intel | nuc_board_nuc7i5bnkp_firmware | - |
| intel | nuc_board_nuc7i5bnb_firmware | - |
| intel | nuc_board_nuc7i7bnh_firmware | - |
| intel | nuc_board_nuc7i7bnhx1_firmware | - |
| intel | nuc_board_nuc7i7bnhxg_firmware | - |
| intel | nuc_board_nuc7i3bnhx1_firmware | - |
| intel | nuc_board_nuc7i7bnkq_firmware | - |
| intel | nuc_board_nuc7i7bnb_firmware | - |
| intel | compute_element_stk2mv64cc_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-421 - Race Condition During Access to Alternate ChannelThe product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.