medium6.7
CVE-2020-0526
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.
Impact
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Nuc Kit Nuc8i7bek Firmware | Version becfl357.86a.0077 |
| Intel | Nuc 8 Enthusiast Pc Nuc8i7bekqa Firmware | Version becfl357.86a.0077 |
| Intel | Nuc Kit Nuc8i7hnk Firmware | Version hnkbli70.86a.0059 |
| Intel | Nuc 8 Business Pc Nuc8i7hnkqc Firmware | Version hnkbli70.86a.0059 |
| Intel | Nuc 8 Mainstream-G Kit Nuc8i7inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Mainstream-G Kit Nuc8i5inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Mainstream-G Mini Pc Nuc8i7inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Rugged Kit Nuc8cchkr Firmware | Version chaplcel.0047 |
| Intel | Nuc Board Nuc8cchb Firmware | Version chaplcel.0047 |
| Intel | Nuc 8 Home Pc Nuc8i3cysm Firmware | Version cycnli35.86a.0044 |
| Intel | Nuc Kit Nuc7i7dnke Firmware | Version dnkbli7v.86a.0067 |
| Intel | Nuc Kit Nuc7i7dnhe Firmware | Version dnkbli7v.86a.0067 |