Cyber Resilience

CVE-2023-40220

Intel Nuc6Cayh Firmware ≤ ayaplcel.86a.0076

Published
14 November 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score 0.0021 11th percentile
Risk Priority 36 floored blend · peak EPSS

Summary

CVE-2023-40220 is a medium-severity DEPRECATED: Improper Sanitization of Custom Special Characters (CWE-92) vulnerability in Intel Nuc6Cayh Firmware. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 11th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

CWE(s)
CWE-92NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-25562Same vendor: Intel
CVE-2023-28722Same vendor: Intel
CVE-2023-27300Same vendor: Intel
CVE-2023-27308Same vendor: Intel
CVE-2023-22390Same vendor: Intel
CVE-2023-24589Same vendor: Intel
CVE-2023-27307Same vendor: Intel
CVE-2023-42429Same vendor: Intel
CVE-2024-24580Same vendor: Intel
CVE-2023-22313Same vendor: Intel

Affected Assets

intel
nuc6cayh firmware
≤ ayaplcel.86a.0076
intel
nuc6cays firmware
≤ ayaplcel.86a.0076

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References