Cyber Resilience

CVE-2023-28722

Intel Nuc 8 Mainstream-G Kit Nuc8I5Inh Firmware inwhl357.0049

Published
19 January 2024
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.7
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
EPSS Score 0.0015 5th percentile
Risk Priority 43 floored blend · peak EPSS

Summary

CVE-2023-28722 is a medium-severity DEPRECATED: Improper Sanitization of Custom Special Characters (CWE-92) vulnerability in Intel Nuc 8 Mainstream-G Kit Nuc8I5Inh Firmware. Its CVSS base score is 6.7 (Medium).

Operationally, ranked at the 5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access.

CWE(s)
CWE-92NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-29495Same product: Intel Nuc 8 Mainstream-G Kit Nuc8I5Inh
CVE-2024-25562Same vendor: Intel
CVE-2023-27300Same vendor: Intel
CVE-2023-27308Same vendor: Intel
CVE-2023-22390Same vendor: Intel
CVE-2023-24589Same vendor: Intel
CVE-2023-40220Same vendor: Intel
CVE-2023-27307Same vendor: Intel
CVE-2023-42429Same vendor: Intel
CVE-2024-24580Same vendor: Intel

Affected Assets

intel
nuc 8 mainstream-g kit nuc8i5inh firmware
inwhl357.0049
intel
nuc 8 mainstream-g kit nuc8i7inh firmware
inwhl357.0049

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References