CVE-2023-40220: Intel NUC6CAYH Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Affected products

• Intel NUC6CAYH Firmware: before ayaplcel.86a.0076 (fixed in ayaplcel.86a.0076)
• Intel NUC6CAYS Firmware: before ayaplcel.86a.0076 (fixed in ayaplcel.86a.0076)

Published 2023-11-14. Last modified 2026-06-17.