cbcvebase.
CVE-2020-12337
published 2020-11-12

CVE-2020-12337: Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

PriorityP425medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.32%
23.8th percentile
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

23 ranges
VendorProductVersion rangeFixed in
intelnuc_8_mainstream-g_kit_nuc8i5inh_firmware——
intelnuc_8_mainstream-g_kit_nuc8i7inh_firmware——
intelnuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware——
intelnuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware——
intelnuc_8_pro_board_nuc8i3pnb_firmware——
intelnuc_8_pro_kit_nuc8i3pnh_firmware——
intelnuc_8_pro_kit_nuc8i3pnk_firmware——
intelnuc_8_pro_mini_pc_nuc8i3pnk_firmware——
intelnuc_8_rugged_kit_nuc8cchkr_firmware——
intelnuc_9_pro_kit_nuc9v7qnx_firmware——
intelnuc_9_pro_kit_nuc9vxqnx_firmware——
intelnuc_board_h27002-400_firmware——
intelnuc_board_h27002-401_firmware——
intelnuc_board_h27002-402_firmware——
intelnuc_board_h27002-404_firmware——
intelnuc_board_h27002-500_firmware——
intelnuc_board_nuc8cchb_firmware——
intelnuc_kit_h26998-401_firmware——
intelnuc_kit_h26998-402_firmware——
intelnuc_kit_h26998-403_firmware——
intelnuc_kit_h26998-404_firmware——
intelnuc_kit_h26998-405_firmware——
intelnuc_kit_h26998-500_firmware——

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.