CVE-2020-0526

Medium

Description

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Nuc Kit Nuc8i7bek Firmware
PublishedMar 12, 2020
First seenMar 12, 2020

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
intel nuc_kit_nuc8i7bek_firmwarebecfl357.86a.0077—
intel nuc_8_enthusiast_pc_nuc8i7bekqa_firmwarebecfl357.86a.0077—
intel nuc_kit_nuc8i7hnk_firmwarehnkbli70.86a.0059—
intel nuc_8_business_pc_nuc8i7hnkqc_firmwarehnkbli70.86a.0059—
intel nuc_8_mainstream-g_kit_nuc8i7inh_firmwareinwhl357.0036—
intel nuc_8_mainstream-g_kit_nuc8i5inh_firmwareinwhl357.0036—
intel nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmwareinwhl357.0036—
intel nuc_8_rugged_kit_nuc8cchkr_firmwarechaplcel.0047—
intel nuc_board_nuc8cchb_firmwarechaplcel.0047—
intel nuc_8_home_pc_nuc8i3cysm_firmwarecycnli35.86a.0044—
intel nuc_kit_nuc7i7dnke_firmwarednkbli7v.86a.0067—
intel nuc_kit_nuc7i7dnhe_firmwarednkbli7v.86a.0067—
intel nuc_kit_nuc7i5dnke_firmwarednkbli5v.86a.0067—
intel nuc_kit_nuc7i5dnhe_firmwarednkbli5v.86a.0067—
intel nuc_kit_nuc7i3dnke_firmwarednkbli30.86a.0067—
intel nuc_kit_nuc7i3dnhe_firmwarednkbli30.86a.0067—
intel nuc_board_nuc7i7dnbe_firmwarednkbli7v.86a.0067—
intel nuc_board_nuc7i5dnbe_firmwarednkbli5v.86a.0067—
intel nuc_board_nuc7i3dnbe_firmwarednkbli30.86a.0067—
intel compute_stick_stk2m3w64cc_firmwareccsklm30.86a.0062—
intel compute_stick_stk2m364cc_firmwareccsklm30.86a.0062—
intel compute_stick_stk1a32sc_firmwaresc0045—
intel compute_stick_stk1aw32sc_firmwaresc0045—
intel nuc_kit_nuc6i7kyk_firmwarekyskli70.86a.0066—
intel nuc_7_essential_pc_nuc7cjysal_firmwarejyglkcpx.86a.0053—
intel nuc_kit_nuc7cjyh_firmwarejyglkcpx.86a.0053—
intel nuc_kit_nuc7pjyh_firmwarejyglkcpx.86a.0053—
intel nuc_kit_nuc7i7bnh_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i5bnk_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i3bnh_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i5bnh_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i3bnk_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i7bnhx1_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i5bnhx1_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc7i3bnhx1_firmwarebnkbl357.86a.0081—
intel nuc_7_enthusiast_pc_nuc7i7bnhxg_firmwarebnkbl357.86a.0081—
intel nuc_7_home_a_mini_pc_nuc7i5bnhxf_firmwarebnkbl357.86a.0081—
intel nuc_7_home_a_mini_pc_nuc7i3bnhxf_firmwarebnkbl357.86a.0081—
intel nuc_7_home_a_mini_pc_nuc7i5bnkp_firmwarebnkbl357.86a.0081—
intel nuc_kit_nuc6cays_firmwareayaplcel.86a.0066—
intel nuc_kit_nuc6cayh_firmwareayaplcel.86a.0066—
intel nuc_kit_de3815tykhe_firmwaretybyt20h.86a.0024—
intel nuc_board_de3815tybe_firmwaretybyt20h.86a.0024—
intel nuc_kit_nuc6i3syh_firmwaresyskli35.86a.0072—
intel nuc_kit_nuc6i5syh_firmwaresyskli35.86a.0072—
intel nuc_kit_nuc6i3syk_firmwaresyskli35.86a.0072—
intel nuc_kit_nuc6i5syk_firmwaresyskli35.86a.0072—
intel nuc_kit_nuc5pgyh_firmwarepybswcel.86a.0078—
intel nuc_kit_nuc5ppyh_firmwarepybswcel.86a.0078—
intel nuc_kit_nuc5cpyh_firmwarepybswcel.86a.0078—
intel nuc_kit_nuc5i5ryk_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i3ryh_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i3ryhs_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i3ryhsn_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i3ryk_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i5ryh_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i5ryhs_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i7ryh_firmwarerybdwi35.86a.0383—
intel nuc_kit_nuc5i3myhe_firmwaremybdwi30.86a.0057—
intel nuc_kit_nuc5i5myhe_firmwaremybdwi5v.86a.0056—
intel nuc_board_nuc5i5mybe_firmwaremybdwi5v.86a.0056—
intel nuc_board_nuc5i3mybe_firmwaremybdwi30.86a.0057—
intel nuc_kit_d54250wyk_firmwarewylpt10h.86a.0054—
intel nuc_board_d34010wyb_firmwarewylpt10h.86a.0054—
intel nuc_board_d54250wyb_firmwarewylpt10h.86a.0054—
intel nuc_kit_d34010wyk_firmwarewylpt10h.86a.0054—
intel nuc_kit_d34010wykh_firmwarewylpt10h.86a.0054—
intel nuc_kit_d54250wykh_firmwarewylpt10h.86a.0054—
intel compute_stick_stck1a32wfc_firmwarestck1a32wfc—
intel compute_stick_stck1a8lfc_firmwarestck1a8lfc—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-0526 · Intel Nuc Kit Nuc8i7bek Firmware · Dark Radar