CVE-2023-40540

VendorintelProductnuc 11 pro board nuc11tnbi30z firmware, nuc 11 pro board nuc11tnbi50z firmware, nuc 11 pro kit nuc11tnhi30z firmware, nuc 11 pro kit nuc11tnhi50z firmware, nuc 11 pro kit nuc11tnhi70z firmware, nuc 11 pro kit nuc11tnki30z firmware, nuc 11 pro kit nuc11tnki50z firmware, nuc 11 pro kit nuc11tnki70z firmware, nuc 11 enthusiast kit nuc11phki7c firmware, nuc 11 enthusiast mini pc nuc11phki7caa firmware, nuc 11 pro board nuc11tnbv5 firmware, nuc 11 pro board nuc11tnbv7 firmware, nuc 11 pro kit nuc11tnhv50l firmware, nuc 11 pro kit nuc11tnhv5 firmware, nuc 11 pro kit nuc11tnhv70l firmware, nuc 11 pro kit nuc11tnhv7 firmware, nuc 11 pro kit nuc11tnkv50z firmware, nuc 11 pro kit nuc11tnkv5 firmware, nuc 11 pro kit nuc11tnkv7 firmware, nuc 11 pro mini pc nuc11tnkv5 firmware, nuc 11 pro mini pc nuc11tnkv7 firmware, nuc 9 extreme laptop kit lapqc71a firmware, nuc 9 extreme laptop kit lapqc71b firmware, nuc 9 extreme laptop kit lapqc71c firmware, nuc 9 extreme laptop kit lapqc71d firmwareDiscoveredNov 14, 2023UpdatedNov 21, 2024

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

View graph Watch Export

CVSS v3.1

4.1 MEDIUM

EPSS

0.21%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityHIGH

Privileges RequiredHIGH

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityNONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Connections

26 relationships