CVE-2020-0600

published 2020-04-15

CVE-2020-0600: Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
intel	compute_stick_stck1a32wfc_firmware	< fcbyt10h.86a	fcbyt10h.86a
intel	nuc_7_essential_pc_nuc7cjysal_firmware	< jyglkcpx.86a.0053	jyglkcpx.86a.0053
intel	nuc_8_rugged_kit_nuc8cchkr_firmware	< chaplcel.0047	chaplcel.0047
intel	nuc_board_de3815tybe_firmware	< tybyt20h.86a.0024	tybyt20h.86a.0024
intel	nuc_board_nuc8cchb_firmware	< chaplcel.0047	chaplcel.0047
intel	nuc_kit_de3815tykhe_firmware	< tybyt20h.86a.0024	tybyt20h.86a.0024
intel	nuc_kit_nuc6cayh_firmware	< ayaplcel.86a0053	ayaplcel.86a0053
intel	nuc_kit_nuc6cays_firmware	< ayaplcel.86a0053	ayaplcel.86a0053
intel	nuc_kit_nuc7cjyh_firmware	< jyglkcpx.86a.0053	jyglkcpx.86a.0053
intel	nuc_kit_nuc7pjyh_firmware	< jyglkcpx.86a.0053	jyglkcpx.86a.0053

CWE-269