CVE-2023-28738: Intel Nuc 7 Essential NUC7CJYSAMN Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Nuc 7 Essential NUC7CJYSAMN Firmware: version jyglkcpx.0071 only
• Intel Nuc Kit NUC7CJYH Firmware: version jyglkcpx.0071 only
• Intel Nuc Kit NUC7CJYHN Firmware: version jyglkcpx.0071 only
• Intel Nuc Kit NUC7CJYSAL Firmware: version jyglkcpx.0071 only
• Intel Nuc Kit NUC7PJYH Firmware: version jyglkcpx.0071 only
• Intel Nuc Kit NUC7PJYHN Firmware: version jyglkcpx.0071 only

Published 2024-01-19. Last modified 2026-06-17.