7.8

CVE-2020-12336

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Version -
Intel ≫ Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Mini Pc Nuc8i3pnk Version -
Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Firmware Version chaplcel.0049
   Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Version -
Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Firmware Version qncflx70.34
   Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Version -
Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Firmware Version qncflx70.34
   Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Version -
Intel ≫ Nuc Board H27002-400 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-400 Version -
Intel ≫ Nuc Board H27002-401 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-401 Version -
Intel ≫ Nuc Board H27002-402 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-402 Version -
Intel ≫ Nuc Board H27002-404 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-404 Version -
Intel ≫ Nuc Board H27002-500 Firmware Version tybyt20h.86a
   Intel ≫ Nuc Board H27002-500 Version -
Intel ≫ Nuc Board Nuc8cchb Firmware Version chaplcel.0049
   Intel ≫ Nuc Board Nuc8cchb Version -
Intel ≫ Nuc Kit H26998-401 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-401 Version -
Intel ≫ Nuc Kit H26998-402 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-402 Version -
Intel ≫ Nuc Kit H26998-403 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-403 Version -
Intel ≫ Nuc Kit H26998-404 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-404 Version -
Intel ≫ Nuc Kit H26998-405 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-405 Version -
Intel ≫ Nuc Kit H26998-500 Firmware Version tybyt20h.86a
   Intel ≫ Nuc Kit H26998-500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.248
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-1188 Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414
Vendor Advisory