Analysis Summary

CVE-2024-36297 CVSS:4.7

Intel NUC Software Studio Service could allow a local authenticated attacker to obtain sensitive information, caused by improper initialization. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

CVE-2024-36483 CVSS:5.5

Intel NUC Software Studio Service is vulnerable to a denial of service, caused by improper buffer restrictions. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-34159 CVSS:7.8

Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by an out-of-bounds write flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.

CVE-2024-23197 CVSS:7.5

Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper access control. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.

CVE-2024-23498 CVSS:8.8

Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper access control. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.

Impact

• Privilege Escalation
• Information Disclosure
• Denial of Service

Indicators of Compromise

CVE

• CVE-2024-36297
• CVE-2024-36483
• CVE-2024-34159
• CVE-2024-23197
• CVE-2024-23498

Affected Vendors

Affected Products

• Intel NUC Software Studio Service
• Intel NUC M15 Laptop Kits - LAPBC510
• Intel NUC M15 Laptop Kits - LAPBC710
• Intel NUC P14E Laptop Element - CMCN1CC

Remediation

Refer to Intel Security Advisory for patch, upgrade or suggested workaround information.

Intel Security Advisory