cbcvebase.
CVE-2020-12336
published 2020-11-12

CVE-2020-12336: Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

23 ranges
VendorProductVersion rangeFixed in
intelnuc_8_mainstream-g_kit_nuc8i5inh_firmware
intelnuc_8_mainstream-g_kit_nuc8i7inh_firmware
intelnuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware
intelnuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware
intelnuc_8_pro_board_nuc8i3pnb_firmware
intelnuc_8_pro_kit_nuc8i3pnh_firmware
intelnuc_8_pro_kit_nuc8i3pnk_firmware
intelnuc_8_pro_mini_pc_nuc8i3pnk_firmware
intelnuc_8_rugged_kit_nuc8cchkr_firmware
intelnuc_9_pro_kit_nuc9v7qnx_firmware
intelnuc_9_pro_kit_nuc9vxqnx_firmware
intelnuc_board_h27002-400_firmware
intelnuc_board_h27002-401_firmware
intelnuc_board_h27002-402_firmware
intelnuc_board_h27002-404_firmware
intelnuc_board_h27002-500_firmware
intelnuc_board_nuc8cchb_firmware
intelnuc_kit_h26998-401_firmware
intelnuc_kit_h26998-402_firmware
intelnuc_kit_h26998-403_firmware
intelnuc_kit_h26998-404_firmware
intelnuc_kit_h26998-405_firmware
intelnuc_kit_h26998-500_firmware