Severity
Medium
Analysis Summary
CVE-2024-36297 CVSS:4.7
Intel NUC Software Studio Service could allow a local authenticated attacker to obtain sensitive information, caused by improper initialization. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
CVE-2024-36483 CVSS:5.5
Intel NUC Software Studio Service is vulnerable to a denial of service, caused by improper buffer restrictions. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2024-34159 CVSS:7.8
Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by an out-of-bounds write flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.
CVE-2024-23197 CVSS:7.5
Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper access control. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.
CVE-2024-23498 CVSS:8.8
Intel NUC Software Studio Service could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper access control. By sending a specially crafted request, an attacker could exploit this vulnerability to gain elevated privileges.
Impact
- Privilege Escalation
- Information Disclosure
- Denial of Service
Indicators of Compromise
CVE
- CVE-2024-36297
- CVE-2024-36483
- CVE-2024-34159
- CVE-2024-23197
- CVE-2024-23498
Affected Vendors
Affected Products
- Intel NUC Software Studio Service
- Intel NUC M15 Laptop Kits - LAPBC510
- Intel NUC M15 Laptop Kits - LAPBC710
- Intel NUC P14E Laptop Element - CMCN1CC
Remediation
Refer to Intel Security Advisory for patch, upgrade or suggested workaround information.