CVE-2023-40540
Intel Nuc 11 Pro Kit Nuc11Tnkv50Z Firmware
Raw vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NSummary
CVE-2023-40540 is a medium-severity Non-Transparent Sharing of Microarchitectural Resources (CWE-1303) vulnerability in Intel Nuc 11 Pro Kit Nuc11Tnkv50Z Firmware. Its CVSS base score is 4.1 (Medium).
Operationally, ranked at the 11th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-45111
Vulnerability Data
Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Runtime monitoring of hardware can detect anomalous cache/branch behavior caused by the weakness.
Hardware authenticity/integrity assessment before acquisition can identify and avoid CPUs with unsafe microarchitectural sharing.
Replacing hardware that lacks needed security capabilities directly targets CPUs whose shared resources violate isolation.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Secure system architecture principles can mandate hardware-level isolation of microarchitectural resources.
Security testing can detect side-channel leakage but does not prevent the underlying microarchitectural sharing.
Secure coding can avoid software patterns that amplify microarchitectural side-channels but does not address the hardware sharing itself.