CVE-2020-0530

Published: Mar 12, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

Affected (70)

Intel

70 products

Nuc Kit Nuc8i7bek Firmware

Nuc 8 Enthusiast Pc Nuc8i7bekqa Firmware

Nuc Kit Nuc8i7hnk Firmware

Nuc 8 Business Pc Nuc8i7hnkqc Firmware

Nuc 8 Mainstream G Kit Nuc8i7inh Firmware

Nuc 8 Mainstream G Kit Nuc8i5inh Firmware

Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware

Nuc 8 Rugged Kit Nuc8cchkr Firmware

Nuc Board Nuc8cchb Firmware

Nuc 8 Home Pc Nuc8i3cysm Firmware

Nuc Kit Nuc7i7dnke Firmware

Nuc Kit Nuc7i7dnhe Firmware

Nuc Kit Nuc7i5dnke Firmware

Nuc Kit Nuc7i5dnhe Firmware

Nuc Kit Nuc7i3dnke Firmware

Nuc Kit Nuc7i3dnhe Firmware

Nuc Board Nuc7i7dnbe Firmware

Nuc Board Nuc7i5dnbe Firmware

Nuc Board Nuc7i3dnbe Firmware

Compute Stick Stk2m3w64cc Firmware

Compute Stick Stk2m364cc Firmware

Compute Stick Stk1a32sc Firmware

Compute Stick Stk1aw32sc Firmware

Nuc Kit Nuc6i7kyk Firmware

Nuc 7 Essential Pc Nuc7cjysal Firmware

Nuc Kit Nuc7cjyh Firmware

Nuc Kit Nuc7pjyh Firmware

Nuc Kit Nuc7i7bnh Firmware

Nuc Kit Nuc7i5bnk Firmware

Nuc Kit Nuc7i3bnh Firmware

Nuc Kit Nuc7i5bnh Firmware

Nuc Kit Nuc7i3bnk Firmware

Nuc Kit Nuc7i7bnhx1 Firmware

Nuc Kit Nuc7i5bnhx1 Firmware

Nuc Kit Nuc7i3bnhx1 Firmware

Nuc 7 Enthusiast Pc Nuc7i7bnhxg Firmware

Nuc 7 Home A Mini Pc Nuc7i5bnhxf Firmware

Nuc 7 Home A Mini Pc Nuc7i3bnhxf Firmware

Nuc 7 Home A Mini Pc Nuc7i5bnkp Firmware

Nuc Kit Nuc6cays Firmware

Nuc Kit Nuc6cayh Firmware

Nuc Kit De3815tykhe Firmware

Nuc Board De3815tybe Firmware

Nuc Kit Nuc6i3syh Firmware

Nuc Kit Nuc6i5syh Firmware

Nuc Kit Nuc6i3syk Firmware

Nuc Kit Nuc6i5syk Firmware

Nuc Kit Nuc5pgyh Firmware

Nuc Kit Nuc5ppyh Firmware

Nuc Kit Nuc5cpyh Firmware

Nuc Kit Nuc5i5ryk Firmware

Nuc Kit Nuc5i3ryh Firmware

Nuc Kit Nuc5i3ryhs Firmware

Nuc Kit Nuc5i3ryhsn Firmware

Nuc Kit Nuc5i3ryk Firmware

Nuc Kit Nuc5i5ryh Firmware

Nuc Kit Nuc5i5ryhs Firmware

Nuc Kit Nuc5i7ryh Firmware

Nuc Kit Nuc5i3myhe Firmware

Nuc Kit Nuc5i5myhe Firmware

Nuc Board Nuc5i5mybe Firmware

Nuc Board Nuc5i3mybe Firmware

Nuc Kit D54250wyk Firmware

Nuc Board D34010wyb Firmware

Nuc Board D54250wyb Firmware

Nuc Kit D34010wyk Firmware

Nuc Kit D34010wykh Firmware

Nuc Kit D54250wykh Firmware

Compute Stick Stck1a32wfc Firmware

Compute Stick Stck1a8lfc Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7bek Firmware	Version becfl357.86a.0077

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7bek	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Enthusiast Pc Nuc8i7bekqa Firmware	Version becfl357.86a.0077

Running on/with	Platform Versions
Intel Nuc 8 Enthusiast Pc Nuc8i7bekqa	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc8i7hnk Firmware	Version hnkbli70.86a.0059

Running on/with	Platform Versions
Intel Nuc Kit Nuc8i7hnk	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Business Pc Nuc8i7hnkqc Firmware	Version hnkbli70.86a.0059

Running on/with	Platform Versions
Intel Nuc 8 Business Pc Nuc8i7hnkqc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr Firmware	Version chaplcel.0047

Running on/with	Platform Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc8cchb Firmware	Version chaplcel.0047

Running on/with	Platform Versions
Intel Nuc Board Nuc8cchb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Home Pc Nuc8i3cysm Firmware	Version cycnli35.86a.0044

Running on/with	Platform Versions
Intel Nuc 8 Home Pc Nuc8i3cysm	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7dnke Firmware	Version dnkbli7v.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7dnke	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7dnhe Firmware	Version dnkbli7v.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7dnhe	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5dnke Firmware	Version dnkbli5v.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5dnke	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5dnhe Firmware	Version dnkbli5v.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5dnhe	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3dnke Firmware	Version dnkbli30.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3dnke	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3dnhe Firmware	Version dnkbli30.86a.0067

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3dnhe	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i7dnbe Firmware	Version dnkbli7v.86a.0067

Running on/with	Platform Versions
Intel Nuc Board Nuc7i7dnbe	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i5dnbe Firmware	Version dnkbli5v.86a.0067

Running on/with	Platform Versions
Intel Nuc Board Nuc7i5dnbe	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc7i3dnbe Firmware	Version dnkbli30.86a.0067

Running on/with	Platform Versions
Intel Nuc Board Nuc7i3dnbe	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk2m3w64cc Firmware	Version ccsklm30.86a.0062

Running on/with	Platform Versions
Intel Compute Stick Stk2m3w64cc	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk2m364cc Firmware	Version ccsklm30.86a.0062

Running on/with	Platform Versions
Intel Compute Stick Stk2m364cc	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk1a32sc Firmware	Version sc0045

Running on/with	Platform Versions
Intel Compute Stick Stk1a32sc	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stk1aw32sc Firmware	Version sc0045

Running on/with	Platform Versions
Intel Compute Stick Stk1aw32sc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6i7kyk Firmware	Version kyskli70.86a.0066

Running on/with	Platform Versions
Intel Nuc Kit Nuc6i7kyk	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Essential Pc Nuc7cjysal Firmware	Version jyglkcpx.86a.0053

Running on/with	Platform Versions
Intel Nuc 7 Essential Pc Nuc7cjysal	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7cjyh Firmware	Version jyglkcpx.86a.0053

Running on/with	Platform Versions
Intel Nuc Kit Nuc7cjyh	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7pjyh Firmware	Version jyglkcpx.86a.0053

Running on/with	Platform Versions
Intel Nuc Kit Nuc7pjyh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnh Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnh	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnk Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnk	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnh Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnh	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnh Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnh	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnk Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnk	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i7bnhx1 Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i7bnhx1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i5bnhx1 Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i5bnhx1	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc7i3bnhx1 Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc Kit Nuc7i3bnhx1	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Enthusiast Pc Nuc7i7bnhxg Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc 7 Enthusiast Pc Nuc7i7bnhxg	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home A Mini Pc Nuc7i5bnhxf Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc 7 Home A Mini Pc Nuc7i5bnhxf	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home A Mini Pc Nuc7i3bnhxf Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc 7 Home A Mini Pc Nuc7i3bnhxf	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 7 Home A Mini Pc Nuc7i5bnkp Firmware	Version bnkbl357.86a.0081

Running on/with	Platform Versions
Intel Nuc 7 Home A Mini Pc Nuc7i5bnkp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6cays Firmware	Version ayaplcel.86a.0066

Running on/with	Platform Versions
Intel Nuc Kit Nuc6cays	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6cayh Firmware	Version ayaplcel.86a.0066

Running on/with	Platform Versions
Intel Nuc Kit Nuc6cayh	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit De3815tykhe Firmware	Version tybyt20h.86a.0024

Running on/with	Platform Versions
Intel Nuc Kit De3815tykhe	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board De3815tybe Firmware	Version tybyt20h.86a.0024

Running on/with	Platform Versions
Intel Nuc Board De3815tybe	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6i3syh Firmware	Version syskli35.86a.0072

Running on/with	Platform Versions
Intel Nuc Kit Nuc6i3syh	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6i5syh Firmware	Version syskli35.86a.0072

Running on/with	Platform Versions
Intel Nuc Kit Nuc6i5syh	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6i3syk Firmware	Version syskli35.86a.0072

Running on/with	Platform Versions
Intel Nuc Kit Nuc6i3syk	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc6i5syk Firmware	Version syskli35.86a.0072

Running on/with	Platform Versions
Intel Nuc Kit Nuc6i5syk	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5pgyh Firmware	Version pybswcel.86a.0078

Running on/with	Platform Versions
Intel Nuc Kit Nuc5pgyh	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5ppyh Firmware	Version pybswcel.86a.0078

Running on/with	Platform Versions
Intel Nuc Kit Nuc5ppyh	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5cpyh Firmware	Version pybswcel.86a.0078

Running on/with	Platform Versions
Intel Nuc Kit Nuc5cpyh	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i5ryk Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i5ryk	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i3ryh Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i3ryh	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i3ryhs Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i3ryhs	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i3ryhsn Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i3ryhsn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i3ryk Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i3ryk	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i5ryh Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i5ryh	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i5ryhs Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i5ryhs	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i7ryh Firmware	Version rybdwi35.86a.0383

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i7ryh	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i3myhe Firmware	Version mybdwi30.86a.0057

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i3myhe	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Nuc5i5myhe Firmware	Version mybdwi5v.86a.0056

Running on/with	Platform Versions
Intel Nuc Kit Nuc5i5myhe	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc5i5mybe Firmware	Version mybdwi5v.86a.0056

Running on/with	Platform Versions
Intel Nuc Board Nuc5i5mybe	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc5i3mybe Firmware	Version mybdwi30.86a.0057

Running on/with	Platform Versions
Intel Nuc Board Nuc5i3mybe	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit D54250wyk Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Kit D54250wyk	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board D34010wyb Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Board D34010wyb	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board D54250wyb Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Board D54250wyb	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit D34010wyk Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Kit D34010wyk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit D34010wykh Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Kit D34010wykh	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit D54250wykh Firmware	Version wylpt10h.86a.0054

Running on/with	Platform Versions
Intel Nuc Kit D54250wykh	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stck1a32wfc Firmware	Version stck1a32wfc

Running on/with	Platform Versions
Intel Compute Stick Stck1a32wfc	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Stick Stck1a8lfc Firmware	Version stck1a8lfc

Running on/with	Platform Versions
Intel Compute Stick Stck1a8lfc	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.