CVE-2023-28743: Input Validation
First published: Fri Jan 19 2024(Updated: )
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Intel NUC 9 Pro Compute Element | =qncflx70.0073 | |
| Intel NUC Pro Compute Element NUC9V7QNB Firmware | ||
| All of | ||
| Intel NUC Pro Compute Element | =qncflx70.0073 | |
| Intel NUC Pro Compute Element NUC9V7QNX | ||
| All of | ||
| Intel NUC Pro Compute Element NUC9V7QNB Firmware | =qncflx70.0073 | |
| Intel NUC 9 Pro Kit | ||
| All of | ||
| Intel NUC Pro Compute Element NUC9V7QNX Firmware | =qncflx70.0073 | |
| Intel NUC9V7QNX Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-28743?
CVE-2023-28743 has a severity rating that indicates a potential escalation of privilege risk for users with local access.
How do I fix CVE-2023-28743?
To fix CVE-2023-28743, update your Intel NUC BIOS firmware to version QN0073 or later.
Who is affected by CVE-2023-28743?
CVE-2023-28743 affects users of Intel NUC 9 Pro Compute Element and Intel NUC 9 Pro Kit devices running BIOS firmware versions prior to QN0073.
What type of vulnerability is CVE-2023-28743?
CVE-2023-28743 is an improper input validation vulnerability that can lead to privilege escalation.
Can CVE-2023-28743 be exploited remotely?
CVE-2023-28743 requires local access for exploitation, making it less of a risk for remote attacks.
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel nuc 9 pro compute element
- version/intel nuc 9 pro compute element/qncflx70.0073
- canonical/intel nuc pro compute element nuc9v7qnb firmware
- canonical/intel nuc pro compute element
- version/intel nuc pro compute element/qncflx70.0073
- canonical/intel nuc pro compute element nuc9v7qnx
- version/intel nuc pro compute element nuc9v7qnb firmware/qncflx70.0073
- canonical/intel nuc 9 pro kit
- canonical/intel nuc pro compute element nuc9v7qnx firmware
- version/intel nuc pro compute element nuc9v7qnx firmware/qncflx70.0073
- canonical/intel nuc9v7qnx firmware