7.8

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Version -
Intel ≫ Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware Version pnwhl357.0037
   Intel ≫ Nuc 8 Pro Mini Pc Nuc8i3pnk Version -
Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Firmware Version chaplcel.0049
   Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Version -
Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Firmware Version qncflx70.34
   Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Version -
Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Firmware Version qncflx70.34
   Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Version -
Intel ≫ Nuc Board H27002-400 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-400 Version -
Intel ≫ Nuc Board H27002-401 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-401 Version -
Intel ≫ Nuc Board H27002-402 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-402 Version -
Intel ≫ Nuc Board H27002-404 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Board H27002-404 Version -
Intel ≫ Nuc Board H27002-500 Firmware Version tybyt20h.86a
   Intel ≫ Nuc Board H27002-500 Version -
Intel ≫ Nuc Board Nuc8cchb Firmware Version chaplcel.0049
   Intel ≫ Nuc Board Nuc8cchb Version -
Intel ≫ Nuc Kit H26998-401 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-401 Version -
Intel ≫ Nuc Kit H26998-402 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-402 Version -
Intel ≫ Nuc Kit H26998-403 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-403 Version -
Intel ≫ Nuc Kit H26998-404 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-404 Version -
Intel ≫ Nuc Kit H26998-405 Firmware Version tybyt10h.86a
   Intel ≫ Nuc Kit H26998-405 Version -
Intel ≫ Nuc Kit H26998-500 Firmware Version tybyt20h.86a
   Intel ≫ Nuc Kit H26998-500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.214
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414
Vendor Advisory
http://seclists.org/fulldisclosure/2020/Nov/26
Third Party Advisory
Mailing List