high7.8
CVE-2020-24525
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via…
Impact
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Nuc 8 Mainstream-G Kit Nuc8i5inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Mainstream-G Kit Nuc8i7inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Mainstream-G Mini Pc Nuc8i5inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Mainstream-G Mini Pc Nuc8i7inh Firmware | Version inwhl357.0036 |
| Intel | Nuc 8 Pro Board Nuc8i3pnb Firmware | Version pnwhl357.0037 |
| Intel | Nuc 8 Pro Kit Nuc8i3pnh Firmware | Version pnwhl357.0037 |
| Intel | Nuc 8 Pro Kit Nuc8i3pnk Firmware | Version pnwhl357.0037 |
| Intel | Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware | Version pnwhl357.0037 |
| Intel | Nuc 8 Rugged Kit Nuc8cchkr Firmware | Version chaplcel.0049 |
| Intel | Nuc 9 Pro Kit Nuc9v7qnx Firmware | Version qncflx70.34 |
| Intel | Nuc 9 Pro Kit Nuc9vxqnx Firmware | Version qncflx70.34 |
| Intel | Nuc Board H27002-400 Firmware | Version tybyt10h.86a |