CVE-2023-29495: Input Validation
Published Jan 19, 2024
·Updated
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
4 affected components
All of the following
Intel Nuc 8 Mainstream-g Kit Nuc8i7inh Firmware<inwhl357.0049
Intel Nuc 8 Mainstream-g Kit Nuc8i7inh
All of the following
Intel Nuc 8 Mainstream-g Kit Nuc8i5inh Firmware<inwhl357.0049
Intel Nuc 8 Mainstream-g Kit Nuc8i5inh
Event History
Jan 19, 2024
CVE Published
via MITRE·08:03 PM
Data Sourced
via MITRE·08:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-29495?
CVE-2023-29495 has been rated as a medium severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2023-29495?
To mitigate CVE-2023-29495, users should update their Intel NUC BIOS firmware to version IN0048 or later.
3
Who is affected by CVE-2023-29495?
CVE-2023-29495 affects Intel NUC 8 Mainstream-G Kit models NUC8i7INH and NUC8i5INH with firmware versions before IN0048.
4
What is the potential impact of CVE-2023-29495?
The potential impact of CVE-2023-29495 is that a privileged user could escalate their privileges via local access.
5
Is there a workaround for CVE-2023-29495?
There are no documented workarounds for CVE-2023-29495; updating the firmware is the recommended action.