CVE-2023-25771
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to...
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
5.8
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
- Record
CVE-2023-25771- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2023-29668
5.8
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
- Record
EUVD-2023-29668- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2cfj-f596-h4fr
5.8
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to...
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
- Record
GHSA-2cfj-f596-h4fr- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
NVD
5.8
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
- Record
CVE-2023-25771- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
- intel compute stick stk2mv64cc firmware
- intel nuc 7 enthusiast nuc7i7bnhxg firmware
- intel nuc 7 enthusiast nuc7i7bnkq firmware
- intel nuc 7 essential nuc7cjysal firmware
- intel nuc 7 essential nuc7cjysamn firmware
- intel nuc 7 home nuc7i3bnhxf firmware
- intel nuc 7 home nuc7i5bnhxf firmware
- intel nuc 7 home nuc7i5bnkp firmware
- intel nuc 8 business nuc8i7hnkqc firmware
- intel nuc 8 compute element cm8ccb4r firmware
- intel nuc 8 compute element cm8i3cb4n firmware
- intel nuc 8 compute element cm8i5cb8n firmware
Show 47 moreShow less
- intel nuc 8 compute element cm8i7cb8n firmware
- intel nuc 8 compute element cm8pcb4r firmware
- intel nuc 8 enthusiast nuc8i7behga firmware
- intel nuc 8 enthusiast nuc8i7bekqa firmware
- intel nuc 8 enthusiast nuc8i7hvkva firmware
- intel nuc 8 enthusiast nuc8i7hvkvaw firmware
- intel nuc 8 home nuc8i3behfa firmware
- intel nuc 8 home nuc8i3cysm firmware
- intel nuc 8 home nuc8i3cysn firmware
- intel nuc 8 home nuc8i5behfa firmware
- intel nuc 8 home nuc8i5bekpa firmware
- intel nuc 8 mainstream-g kit nuc8i5inh firmware
- intel nuc 8 mainstream-g kit nuc8i7inh firmware
- intel nuc 8 mainstream-g mini pc nuc8i5inh firmware
- intel nuc 8 mainstream-g mini pc nuc8i7inh firmware
- intel nuc 8 pro board nuc8i3pnb firmware
- intel nuc 8 pro kit nuc8i3pnh firmware
- intel nuc 8 pro kit nuc8i3pnk firmware
- intel nuc 9 pro compute element nuc9v7qnb firmware
- intel nuc 9 pro compute element nuc9v7qnx firmware
- intel nuc 9 pro compute element nuc9vxqnb firmware
- intel nuc 9 pro compute element nuc9vxqnx firmware
- intel nuc board nuc7i3bnb firmware
- intel nuc board nuc7i5bnb firmware
- intel nuc board nuc7i7bnb firmware
- intel nuc kit nuc7cjyh firmware
- intel nuc kit nuc7cjyhn firmware
- intel nuc kit nuc7i3bnh firmware
- intel nuc kit nuc7i3bnhx1 firmware
- intel nuc kit nuc7i3bnk firmware
- intel nuc kit nuc7i5bnh firmware
- intel nuc kit nuc7i5bnhx1 firmware
- intel nuc kit nuc7i5bnk firmware
- intel nuc kit nuc7i7bnh firmware
- intel nuc kit nuc7i7bnhx1 firmware
- intel nuc kit nuc7pjyh firmware
- intel nuc kit nuc7pjyhn firmware
- intel nuc kit nuc8i3beh firmware
- intel nuc kit nuc8i3behs firmware
- intel nuc kit nuc8i3bek firmware
- intel nuc kit nuc8i5beh firmware
- intel nuc kit nuc8i5behs firmware
- intel nuc kit nuc8i5bek firmware
- intel nuc kit nuc8i7beh firmware
- intel nuc kit nuc8i7bek firmware
- intel nuc kit nuc8i7hnk firmware
- intel nuc kit nuc8i7hvk firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-25771 is a medium vulnerability (CVSS 5.8) in Intel Compute Stick Stk2mv64cc Firmware, published May 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.