CVE-2020-12336

Published: Nov 12, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (23)

Products: Intel: Nuc 8 Mainstream G Kit Nuc8i5inh Firmware, Nuc 8 Mainstream G Kit Nuc8i7inh Firmware, Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware, Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware, Nuc 8 Pro Board Nuc8i3pnb Firmware, Nuc 8 Pro Kit Nuc8i3pnh Firmware, Nuc 8 Pro Kit Nuc8i3pnk Firmware, Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware, Nuc 8 Rugged Kit Nuc8cchkr Firmware, Nuc 9 Pro Kit Nuc9v7qnx Firmware, Nuc 9 Pro Kit Nuc9vxqnx Firmware, Nuc Board H27002 400 Firmware, Nuc Board H27002 401 Firmware, Nuc Board H27002 402 Firmware, Nuc Board H27002 404 Firmware, Nuc Board H27002 500 Firmware, Nuc Board Nuc8cchb Firmware, Nuc Kit H26998 401 Firmware, Nuc Kit H26998 402 Firmware, Nuc Kit H26998 403 Firmware, Nuc Kit H26998 404 Firmware, Nuc Kit H26998 405 Firmware, Nuc Kit H26998 500 Firmware

Intel

23 products

Nuc 8 Mainstream G Kit Nuc8i5inh Firmware

Nuc 8 Mainstream G Kit Nuc8i7inh Firmware

Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware

Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware

Nuc 8 Pro Board Nuc8i3pnb Firmware

Nuc 8 Pro Kit Nuc8i3pnh Firmware

Nuc 8 Pro Kit Nuc8i3pnk Firmware

Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware

Nuc 8 Rugged Kit Nuc8cchkr Firmware

Nuc 9 Pro Kit Nuc9v7qnx Firmware

Nuc 9 Pro Kit Nuc9vxqnx Firmware

Nuc Board H27002 400 Firmware

Nuc Board H27002 401 Firmware

Nuc Board H27002 402 Firmware

Nuc Board H27002 404 Firmware

Nuc Board H27002 500 Firmware

Nuc Board Nuc8cchb Firmware

Nuc Kit H26998 401 Firmware

Nuc Kit H26998 402 Firmware

Nuc Kit H26998 403 Firmware

Nuc Kit H26998 404 Firmware

Nuc Kit H26998 405 Firmware

Nuc Kit H26998 500 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i5inh	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Kit Nuc8i7inh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i5inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i5inh	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh Firmware	Version inwhl357.0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream G Mini Pc Nuc8i7inh	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Board Nuc8i3pnb Firmware	Version pnwhl357.0037

Running on/with	Platform Versions
Intel Nuc 8 Pro Board Nuc8i3pnb	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Kit Nuc8i3pnh Firmware	Version pnwhl357.0037

Running on/with	Platform Versions
Intel Nuc 8 Pro Kit Nuc8i3pnh	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Kit Nuc8i3pnk Firmware	Version pnwhl357.0037

Running on/with	Platform Versions
Intel Nuc 8 Pro Kit Nuc8i3pnk	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware	Version pnwhl357.0037

Running on/with	Platform Versions
Intel Nuc 8 Pro Mini Pc Nuc8i3pnk	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr Firmware	Version chaplcel.0049

Running on/with	Platform Versions
Intel Nuc 8 Rugged Kit Nuc8cchkr	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Kit Nuc9v7qnx Firmware	Version qncflx70.34

Running on/with	Platform Versions
Intel Nuc 9 Pro Kit Nuc9v7qnx	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 9 Pro Kit Nuc9vxqnx Firmware	Version qncflx70.34

Running on/with	Platform Versions
Intel Nuc 9 Pro Kit Nuc9vxqnx	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board H27002 400 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Board H27002 400	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board H27002 401 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Board H27002 401	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board H27002 402 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Board H27002 402	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board H27002 404 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Board H27002 404	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board H27002 500 Firmware	Version tybyt20h.86a

Running on/with	Platform Versions
Intel Nuc Board H27002 500	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Board Nuc8cchb Firmware	Version chaplcel.0049

Running on/with	Platform Versions
Intel Nuc Board Nuc8cchb	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 401 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 401	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 402 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 402	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 403 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 403	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 404 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 404	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 405 Firmware	Version tybyt10h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 405	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit H26998 500 Firmware	Version tybyt20h.86a

Running on/with	Platform Versions
Intel Nuc Kit H26998 500	All versions

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.