CVE-2020-8742

Published: Aug 13, 2020Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (75)

Products: Intel: Nuc8i7behga Firmware, Nuc8i7bekqa Firmware, Nuc8i3behfa Firmware, Nuc8i5behfa Firmware, Nuc8i5bekpa Firmware, Nuc8i3beh Firmware, Nuc8i3behs Firmware, Nuc8i3bek Firmware, Nuc8i5beh Firmware, Nuc8i5behs Firmware, Nuc8i5bek Firmware, Nuc8i7beh Firmware, Nuc8i7bek Firmware, Cd1c32gk Firmware, Cd1c64gk Firmware, Cd1p64gk Firmware, Nuc8i7hnkqc Firmware, Nuc8i7hvkva Firmware, Nuc8i7hvkvaw Firmware, Nuc8i7hnk Firmware, Nuc8i7hvk Firmware, Nuc7i7dnbe Firmware, Nuc7i7dnhe Firmware, Nuc7i7dnke Firmware, Nuc7i5dnkpc Firmware, Nuc7i5dnbe Firmware, Nuc7i5dnhe Firmware, Nuc7i5dnke Firmware, Nuc7i3dnhnc Firmware, Nuc7i3dnktc Firmware, Nuc7i3dnbe Firmware, Nuc7i3dnhe Firmware, Nuc7i3dnke Firmware, Stk2mv64cc Firmware, Nuc6i7kyk Firmware, Nuc7cjysal Firmware, Nuc7cjyh Firmware, Nuc7pjyh Firmware, Nuc7i7bnhxg Firmware, Nuc7i7bnkq Firmware, Nuc7i3bnhxf Firmware, Nuc7i5bnhxf Firmware, Nuc7i5bnkp Firmware, Nuc7i3bnb Firmware, Nuc7i5bnb Firmware, Nuc7i7bnb Firmware, Nuc7i3bnh Firmware, Nuc7i3bnhx1 Firmware, Nuc7i3bnk Firmware, Nuc7i5bnh Firmware, Nuc7i5bnhx1 Firmware, Nuc7i5bnk Firmware, Nuc7i7bnh Firmware, Nuc7i7bnhx1 Firmware, Nuc6cayh Firmware, Nuc6cays Firmware, De3815tybe Firmware, De3815tykhe Firmware, Nuc5cpyh Firmware, Nuc5pgyh Firmware, Nuc5ppyh Firmware, Nuc5i3ryh Firmware, Nuc5i3ryhs Firmware, Nuc5i3ryhsn Firmware, Nuc5i3ryk Firmware, Nuc5i5ryh Firmware, Nuc5i5ryhs Firmware, Nuc5i5ryk Firmware, Nuc5i7ryh Firmware, Nuc5i5mybe Firmware, Nuc5i5myhe Firmware, Nuc5i3mybe Firmware, Nuc5i3myhe Firmware

73 products

Nuc8i7hvkvaw Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7behga Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i7behga	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7bekqa Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i7bekqa	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3behfa Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i3behfa	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i5behfa Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i5behfa	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i5bekpa Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i5bekpa	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3beh Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i3beh	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3behs Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i3behs	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3bek Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i3bek	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i5beh Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i5beh	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i5behs Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i5behs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i5bek Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i5bek	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7beh Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i7beh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7bek Firmware	Before becfl357.86a

Running on/with	Platform Versions
Intel Nuc8i7bek	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1c32gk Firmware	Before gkaplcpx.86a

Running on/with	Platform Versions
Intel Cd1c32gk	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1c64gk Firmware	Before gkaplcpx.86a

Running on/with	Platform Versions
Intel Cd1c64gk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1p64gk Firmware	Before gkaplcpx.86a

Running on/with	Platform Versions
Intel Cd1p64gk	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hnkqc Firmware	Before hnkbli70.86a

Running on/with	Platform Versions
Intel Nuc8i7hnkqc	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hvkva Firmware	Before hnkbli70.86a

Running on/with	Platform Versions
Intel Nuc8i7hvkva	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hvkvaw Firmware	Before hnkbli70.86a

Running on/with	Platform Versions
Intel Nuc8i7hvkvaw	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hnk Firmware	Before hnkbli70.86a

Running on/with	Platform Versions
Intel Nuc8i7hnk	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hvk Firmware	Before hnkbli70.86a

Running on/with	Platform Versions
Intel Nuc8i7hvk	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7dnbe Firmware	Before dnkbli7v.86a

Running on/with	Platform Versions
Intel Nuc7i7dnbe	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7dnhe Firmware	Before dnkbli7v.86a

Running on/with	Platform Versions
Intel Nuc7i7dnhe	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7dnke Firmware	Before dnkbli7v.86a

Running on/with	Platform Versions
Intel Nuc7i7dnke	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5dnkpc Firmware	Before dnkbli5v.86a

Running on/with	Platform Versions
Intel Nuc7i5dnkpc	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5dnbe Firmware	Before dnkbli5v.86a

Running on/with	Platform Versions
Intel Nuc7i5dnbe	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5dnhe Firmware	Before dnkbli5v.86a

Running on/with	Platform Versions
Intel Nuc7i5dnhe	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5dnke Firmware	Before dnkbli5v.86a

Running on/with	Platform Versions
Intel Nuc7i5dnke	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnhnc Firmware	Before dnkbli30.86a

Running on/with	Platform Versions
Intel Nuc7i3dnhnc	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnktc Firmware	Before dnkbli30.86a

Running on/with	Platform Versions
Intel Nuc7i3dnktc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnbe Firmware	Before dnkbli30.86a

Running on/with	Platform Versions
Intel Nuc7i3dnbe	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnhe Firmware	Before dnkbli30.86a

Running on/with	Platform Versions
Intel Nuc7i3dnhe	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnke Firmware	Before dnkbli30.86a

Running on/with	Platform Versions
Intel Nuc7i3dnke	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Stk2mv64cc Firmware	Before ccsklm5v.86a

Running on/with	Platform Versions
Intel Stk2mv64cc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6i7kyk Firmware	Before kyskli70.86a

Running on/with	Platform Versions
Intel Nuc6i7kyk	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7cjysal Firmware	Before jyglkcpx.86a

Running on/with	Platform Versions
Intel Nuc7cjysal	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7cjyh Firmware	Before jyglkcpx.86a

Running on/with	Platform Versions
Intel Nuc7cjyh	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7pjyh Firmware	Before jyglkcpx.86a

Running on/with	Platform Versions
Intel Nuc7pjyh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7bnhxg Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i7bnhxg	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7bnkq Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i7bnkq	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3bnhxf Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i3bnhxf	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnhxf Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnhxf	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnkp Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnkp	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3bnb Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i3bnb	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnb Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnb	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7bnb Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i7bnb	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3bnh Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i3bnh	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3bnhx1 Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i3bnhx1	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3bnk Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i3bnk	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnh Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnh	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnhx1 Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnhx1	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5bnk Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i5bnk	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7bnh Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i7bnh	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7bnhx1 Firmware	Before bnkbl357.86a

Running on/with	Platform Versions
Intel Nuc7i7bnhx1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6cayh Firmware	Before ayaplcel.86a

Running on/with	Platform Versions
Intel Nuc6cayh	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6cays Firmware	Before ayaplcel.86a

Running on/with	Platform Versions
Intel Nuc6cays	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Intel De3815tybe Firmware	Before tybyt20h.86a

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Intel De3815tykhe Firmware	Before tybyt20h.86a

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel De3815tybe Firmware	Before tybyt10h.86a

Running on/with	Platform Versions
Intel De3815tybe	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel De3815tykhe Firmware	Before tybyt10h.86a

Running on/with	Platform Versions
Intel De3815tykhe	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5cpyh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5cpyh	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5pgyh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5pgyh	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5ppyh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5ppyh	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3ryh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i3ryh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3ryhs Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i3ryhs	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3ryhsn Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i3ryhsn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3ryk Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i3ryk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i5ryh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i5ryh	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i5ryhs Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i5ryhs	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i5ryk Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i5ryk	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i7ryh Firmware	Before pybswcel.86a

Running on/with	Platform Versions
Intel Nuc5i7ryh	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i5mybe Firmware	Before mybdwi5v.86a

Running on/with	Platform Versions
Intel Nuc5i5mybe	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i5myhe Firmware	Before mybdwi5v.86a

Running on/with	Platform Versions
Intel Nuc5i5myhe	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3mybe Firmware	Before mybdwi5v.86a

Running on/with	Platform Versions
Intel Nuc5i3mybe	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc5i3myhe Firmware	Before mybdwi5v.86a

Running on/with	Platform Versions
Intel Nuc5i3myhe	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.