CVE-2020-24525
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Unos permisos heredados no seguros en la herramienta de actualización de firmware para algunos Intel® NUCs pueden habilitar a un usuario autenticado para permitir potencialmente una escalada de privilegios por medio de un acceso local
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-19 CVE Reserved
- 2020-11-12 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2020/Nov/26 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414 | 2021-07-21 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Nuc 8 Mainstream-g Kit Nuc8i5inh Firmware Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i5inh Firmware" | inwhl357.0036 Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i5inh Firmware" and version "inwhl357.0036" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Mainstream-g Kit Nuc8i5inh Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i5inh" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Mainstream-g Kit Nuc8i7inh Firmware Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i7inh Firmware" | inwhl357.0036 Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i7inh Firmware" and version "inwhl357.0036" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Mainstream-g Kit Nuc8i7inh Search vendor "Intel" for product "Nuc 8 Mainstream-g Kit Nuc8i7inh" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Mainstream-g Mini Pc Nuc8i5inh Firmware Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i5inh Firmware" | inwhl357.0036 Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i5inh Firmware" and version "inwhl357.0036" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Mainstream-g Mini Pc Nuc8i5inh Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i5inh" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Mainstream-g Mini Pc Nuc8i7inh Firmware Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i7inh Firmware" | inwhl357.0036 Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i7inh Firmware" and version "inwhl357.0036" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Mainstream-g Mini Pc Nuc8i7inh Search vendor "Intel" for product "Nuc 8 Mainstream-g Mini Pc Nuc8i7inh" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Pro Board Nuc8i3pnb Firmware Search vendor "Intel" for product "Nuc 8 Pro Board Nuc8i3pnb Firmware" | pnwhl357.0037 Search vendor "Intel" for product "Nuc 8 Pro Board Nuc8i3pnb Firmware" and version "pnwhl357.0037" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Pro Board Nuc8i3pnb Search vendor "Intel" for product "Nuc 8 Pro Board Nuc8i3pnb" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Pro Kit Nuc8i3pnh Firmware Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnh Firmware" | pnwhl357.0037 Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnh Firmware" and version "pnwhl357.0037" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Pro Kit Nuc8i3pnh Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnh" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Pro Kit Nuc8i3pnk Firmware Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnk Firmware" | pnwhl357.0037 Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnk Firmware" and version "pnwhl357.0037" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Pro Kit Nuc8i3pnk Search vendor "Intel" for product "Nuc 8 Pro Kit Nuc8i3pnk" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware Search vendor "Intel" for product "Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware" | pnwhl357.0037 Search vendor "Intel" for product "Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware" and version "pnwhl357.0037" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Pro Mini Pc Nuc8i3pnk Search vendor "Intel" for product "Nuc 8 Pro Mini Pc Nuc8i3pnk" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 8 Rugged Kit Nuc8cchkr Firmware Search vendor "Intel" for product "Nuc 8 Rugged Kit Nuc8cchkr Firmware" | chaplcel.0049 Search vendor "Intel" for product "Nuc 8 Rugged Kit Nuc8cchkr Firmware" and version "chaplcel.0049" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 8 Rugged Kit Nuc8cchkr Search vendor "Intel" for product "Nuc 8 Rugged Kit Nuc8cchkr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 9 Pro Kit Nuc9v7qnx Firmware Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9v7qnx Firmware" | qncflx70.34 Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9v7qnx Firmware" and version "qncflx70.34" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 9 Pro Kit Nuc9v7qnx Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9v7qnx" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc 9 Pro Kit Nuc9vxqnx Firmware Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9vxqnx Firmware" | qncflx70.34 Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9vxqnx Firmware" and version "qncflx70.34" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc 9 Pro Kit Nuc9vxqnx Search vendor "Intel" for product "Nuc 9 Pro Kit Nuc9vxqnx" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board H27002-400 Firmware Search vendor "Intel" for product "Nuc Board H27002-400 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Board H27002-400 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board H27002-400 Search vendor "Intel" for product "Nuc Board H27002-400" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board H27002-401 Firmware Search vendor "Intel" for product "Nuc Board H27002-401 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Board H27002-401 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board H27002-401 Search vendor "Intel" for product "Nuc Board H27002-401" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board H27002-402 Firmware Search vendor "Intel" for product "Nuc Board H27002-402 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Board H27002-402 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board H27002-402 Search vendor "Intel" for product "Nuc Board H27002-402" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board H27002-404 Firmware Search vendor "Intel" for product "Nuc Board H27002-404 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Board H27002-404 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board H27002-404 Search vendor "Intel" for product "Nuc Board H27002-404" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board H27002-500 Firmware Search vendor "Intel" for product "Nuc Board H27002-500 Firmware" | tybyt20h.86a Search vendor "Intel" for product "Nuc Board H27002-500 Firmware" and version "tybyt20h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board H27002-500 Search vendor "Intel" for product "Nuc Board H27002-500" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Board Nuc8cchb Firmware Search vendor "Intel" for product "Nuc Board Nuc8cchb Firmware" | chaplcel.0049 Search vendor "Intel" for product "Nuc Board Nuc8cchb Firmware" and version "chaplcel.0049" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Board Nuc8cchb Search vendor "Intel" for product "Nuc Board Nuc8cchb" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-401 Firmware Search vendor "Intel" for product "Nuc Kit H26998-401 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Kit H26998-401 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-401 Search vendor "Intel" for product "Nuc Kit H26998-401" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-402 Firmware Search vendor "Intel" for product "Nuc Kit H26998-402 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Kit H26998-402 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-402 Search vendor "Intel" for product "Nuc Kit H26998-402" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-403 Firmware Search vendor "Intel" for product "Nuc Kit H26998-403 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Kit H26998-403 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-403 Search vendor "Intel" for product "Nuc Kit H26998-403" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-404 Firmware Search vendor "Intel" for product "Nuc Kit H26998-404 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Kit H26998-404 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-404 Search vendor "Intel" for product "Nuc Kit H26998-404" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-405 Firmware Search vendor "Intel" for product "Nuc Kit H26998-405 Firmware" | tybyt10h.86a Search vendor "Intel" for product "Nuc Kit H26998-405 Firmware" and version "tybyt10h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-405 Search vendor "Intel" for product "Nuc Kit H26998-405" | - | - |
Safe
|
| Intel Search vendor "Intel" | Nuc Kit H26998-500 Firmware Search vendor "Intel" for product "Nuc Kit H26998-500 Firmware" | tybyt20h.86a Search vendor "Intel" for product "Nuc Kit H26998-500 Firmware" and version "tybyt20h.86a" | - |
Affected
| in | Intel Search vendor "Intel" | Nuc Kit H26998-500 Search vendor "Intel" for product "Nuc Kit H26998-500" | - | - |
Safe
|