Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
| Link | Tags |
|---|---|
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html | patch vendor advisory |