CVE-2020-8742: Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

PriorityP424medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.32%

24.2th percentile

Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

75 ranges· showing 25

Vendor	Product	Version range	Fixed in
intel	cd1c32gk_firmware	< gkaplcpx.86a	gkaplcpx.86a
intel	cd1c64gk_firmware	< gkaplcpx.86a	gkaplcpx.86a
intel	cd1p64gk_firmware	< gkaplcpx.86a	gkaplcpx.86a
intel	de3815tybe_firmware	< tybyt20h.86a	tybyt20h.86a
intel	de3815tybe_firmware	< tybyt10h.86a	tybyt10h.86a
intel	de3815tykhe_firmware	< tybyt20h.86a	tybyt20h.86a
intel	de3815tykhe_firmware	< tybyt10h.86a	tybyt10h.86a
intel	nuc5cpyh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i3mybe_firmware	< mybdwi5v.86a	mybdwi5v.86a
intel	nuc5i3myhe_firmware	< mybdwi5v.86a	mybdwi5v.86a
intel	nuc5i3ryh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i3ryhs_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i3ryhsn_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i3ryk_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i5mybe_firmware	< mybdwi5v.86a	mybdwi5v.86a
intel	nuc5i5myhe_firmware	< mybdwi5v.86a	mybdwi5v.86a
intel	nuc5i5ryh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i5ryhs_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i5ryk_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5i7ryh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5pgyh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc5ppyh_firmware	< pybswcel.86a	pybswcel.86a
intel	nuc6cayh_firmware	< ayaplcel.86a	ayaplcel.86a
intel	nuc6cays_firmware	< ayaplcel.86a	ayaplcel.86a
intel	nuc6i7kyk_firmware	< kyskli70.86a	kyskli70.86a

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.