CVE-2023-28377: Intel USB Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel USB Firmware: before 1.1 (fixed in 1.1)

Published 2023-11-14. Last modified 2026-06-17.