CVE-2023-34086

Q: What is the severity of CVE-2023-34086?

CVE-2023-34086 has a CVSS score of 8.2 (HIGH). This vulnerability in Intel NUC BIOS firmware allows a privileged user with local access to potentially escalate privileges through improper input validation. It affects Intel NUC systems with vulnerable BIOS versions. Attackers could gain higher system privileges than intended.

8.2 HIGH

📋 TL;DR

This vulnerability in Intel NUC BIOS firmware allows a privileged user with local access to potentially escalate privileges through improper input validation. It affects Intel NUC systems with vulnerable BIOS versions. Attackers could gain higher system privileges than intended.

💻 Affected Systems

Products:

Intel NUC systems

Versions: Specific BIOS versions listed in Intel advisory

Operating Systems: All operating systems running on affected NUC hardware

Default Config Vulnerable: ⚠️ Yes

Notes: Requires local privileged access to exploit. Affects physical NUC devices, not virtual systems.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

An attacker with local privileged access could gain full system control, bypass security controls, install persistent malware, or access sensitive data.

🟠

Likely Case

A malicious insider or compromised privileged account could escalate privileges to gain unauthorized access to system resources or bypass security restrictions.

🟢

If Mitigated

With proper access controls and BIOS updates, the risk is significantly reduced to minimal impact.

🌐 Internet-Facing: LOW with brief explanation

🏢 Internal Only: HIGH with brief explanation

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local privileged access and BIOS-level knowledge. No public exploits known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: BIOS updates specified in Intel-SA-00917 advisory

Vendor Advisory: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html

Restart Required: Yes

Instructions:

1. Visit Intel's security advisory page. 2. Identify your NUC model. 3. Download the appropriate BIOS update. 4. Follow Intel's BIOS update instructions. 5. Reboot the system.

🔧 Temporary Workarounds

Restrict physical and local access

all

Limit physical access to NUC devices and restrict local privileged accounts

🧯 If You Can't Patch

Implement strict access controls to limit who has local privileged access to NUC systems
Monitor for unusual BIOS-level activity or privilege escalation attempts

🔍 How to Verify

Check if Vulnerable:

Check BIOS version against Intel's advisory. On Windows: Run 'wmic bios get smbiosbiosversion'. On Linux: Check '/sys/class/dmi/id/bios_version' or use 'dmidecode -s bios-version'.

Check Version:

Windows: wmic bios get smbiosbiosversion | Linux: sudo dmidecode -s bios-version

Verify Fix Applied:

Verify BIOS version has been updated to patched version using same commands as above.

📡 Detection & Monitoring

Log Indicators:

Unusual BIOS update attempts
Privilege escalation events
Unexpected local administrator activity

Network Indicators:

Local system calls to BIOS/UEFI interfaces

SIEM Query:

EventID=4688 OR EventID=4104 with process names containing BIOS/UEFI related terms

📊 Metadata

CVE ID: CVE-2023-34086

CVSS v3 Score: 8.2 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-20

Published: August 11, 2023

Last Updated: November 21, 2024

🔗 References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html Patch,Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Compute Element Stk2mv64cc Firmware by Intel

Nuc Board Nuc7i3bnb Firmware by Intel

Nuc Board Nuc7i3bnh Firmware by Intel

Nuc Board Nuc7i3bnhx1 Firmware by Intel

Nuc Board Nuc7i3bnhxf Firmware by Intel

Nuc Board Nuc7i3bnk Firmware by Intel

Nuc Board Nuc7i5bnb Firmware by Intel

Nuc Board Nuc7i5bnh Firmware by Intel

Nuc Board Nuc7i5bnhx1 Firmware by Intel

Nuc Board Nuc7i5bnhxf Firmware by Intel

Nuc Board Nuc7i5bnk Firmware by Intel

Nuc Board Nuc7i5bnkp Firmware by Intel

Nuc Board Nuc7i7bnb Firmware by Intel

Nuc Board Nuc7i7bnh Firmware by Intel

Nuc Board Nuc7i7bnhx1 Firmware by Intel

Nuc Board Nuc7i7bnhxg Firmware by Intel

Nuc Board Nuc7i7bnkq Firmware by Intel

Nuc Enthusiast Nuc7i3bnb Firmware by Intel

Nuc Enthusiast Nuc7i3bnh Firmware by Intel

Nuc Enthusiast Nuc7i3bnhx1 Firmware by Intel

Nuc Enthusiast Nuc7i3bnhxf Firmware by Intel

Nuc Enthusiast Nuc7i3bnk Firmware by Intel

Nuc Enthusiast Nuc7i5bnb Firmware by Intel

Nuc Enthusiast Nuc7i5bnh Firmware by Intel

Nuc Enthusiast Nuc7i5bnhx1 Firmware by Intel

Nuc Enthusiast Nuc7i5bnhxf Firmware by Intel

Nuc Enthusiast Nuc7i5bnk Firmware by Intel

Nuc Enthusiast Nuc7i5bnkp Firmware by Intel

Nuc Enthusiast Nuc7i7bnb Firmware by Intel

Nuc Enthusiast Nuc7i7bnh Firmware by Intel

Nuc Enthusiast Nuc7i7bnhx1 Firmware by Intel

Nuc Enthusiast Nuc7i7bnhxg Firmware by Intel

Nuc Enthusiast Nuc7i7bnkq Firmware by Intel

Nuc Kit Nuc6cayh Firmware by Intel

Nuc Kit Nuc6cays Firmware by Intel

Nuc Kit Nuc7i3bnb Firmware by Intel

Nuc Kit Nuc7i3bnh Firmware by Intel

Nuc Kit Nuc7i3bnhx1 Firmware by Intel

Nuc Kit Nuc7i3bnhxf Firmware by Intel

Nuc Kit Nuc7i3bnk Firmware by Intel

Nuc Kit Nuc7i5bnb Firmware by Intel

Nuc Kit Nuc7i5bnh Firmware by Intel

Nuc Kit Nuc7i5bnhx1 Firmware by Intel

Nuc Kit Nuc7i5bnhxf Firmware by Intel

Nuc Kit Nuc7i5bnk Firmware by Intel

Nuc Kit Nuc7i5bnkp Firmware by Intel

Nuc Kit Nuc7i7bnb Firmware by Intel

Nuc Kit Nuc7i7bnh Firmware by Intel

Nuc Kit Nuc7i7bnhx1 Firmware by Intel

Nuc Kit Nuc7i7bnhxg Firmware by Intel

Nuc Kit Nuc7i7bnkq Firmware by Intel

Nuc Mini Pc Nuc7i3bnb Firmware by Intel

Nuc Mini Pc Nuc7i3bnh Firmware by Intel

Nuc Mini Pc Nuc7i3bnhx1 Firmware by Intel

Nuc Mini Pc Nuc7i3bnhxf Firmware by Intel

Nuc Mini Pc Nuc7i3bnk Firmware by Intel

Nuc Mini Pc Nuc7i5bnb Firmware by Intel

Nuc Mini Pc Nuc7i5bnh Firmware by Intel

Nuc Mini Pc Nuc7i5bnhx1 Firmware by Intel

Nuc Mini Pc Nuc7i5bnhxf Firmware by Intel

Nuc Mini Pc Nuc7i5bnk Firmware by Intel

Nuc Mini Pc Nuc7i5bnkp Firmware by Intel

Nuc Mini Pc Nuc7i7bnb Firmware by Intel

Nuc Mini Pc Nuc7i7bnh Firmware by Intel

Nuc Mini Pc Nuc7i7bnhx1 Firmware by Intel

Nuc Mini Pc Nuc7i7bnhxg Firmware by Intel

Nuc Mini Pc Nuc7i7bnkq Firmware by Intel

Nuc Rugged Kit Nuc8cchb Firmware by Intel

Nuc Rugged Kit Nuc8cchbn Firmware by Intel

Nuc Rugged Kit Nuc8cchkr Firmware by Intel

Nuc Rugged Kit Nuc8cchkrn Firmware by Intel