NetSight
high7.8

CVE-2020-0530

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

Impact

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

Affected products

VendorProductAffected versions
IntelNuc Kit Nuc8i7bek Firmware
Version becfl357.86a.0077
IntelNuc 8 Enthusiast Pc Nuc8i7bekqa Firmware
Version becfl357.86a.0077
IntelNuc Kit Nuc8i7hnk Firmware
Version hnkbli70.86a.0059
IntelNuc 8 Business Pc Nuc8i7hnkqc Firmware
Version hnkbli70.86a.0059
IntelNuc 8 Mainstream-G Kit Nuc8i7inh Firmware
Version inwhl357.0036
IntelNuc 8 Mainstream-G Kit Nuc8i5inh Firmware
Version inwhl357.0036
IntelNuc 8 Mainstream-G Mini Pc Nuc8i7inh Firmware
Version inwhl357.0036
IntelNuc 8 Rugged Kit Nuc8cchkr Firmware
Version chaplcel.0047
IntelNuc Board Nuc8cchb Firmware
Version chaplcel.0047
IntelNuc 8 Home Pc Nuc8i3cysm Firmware
Version cycnli35.86a.0044
IntelNuc Kit Nuc7i7dnke Firmware
Version dnkbli7v.86a.0067
IntelNuc Kit Nuc7i7dnhe Firmware
Version dnkbli7v.86a.0067

Weakness classification

References