CVE-2020-12337

🗓️ 12 Nov 2020 18:15:58Reported by intelType

Improper buffer restrictions in firmware on certain Intel(R) NUCs allowing escalation of privilege

Reporter	Title	Published	Views	Family All 9
CNVD	Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2020-66301)	23 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-12337	12 Nov 202018:15	–	cvelist
EUVD	EUVD-2020-4649	7 Oct 202500:30	–	euvd
Intel	Intel® NUC Firmware Advisory	10 Mar 202300:00	–	intel
NVD	CVE-2020-12337	12 Nov 202019:15	–	nvd
OSV	CVE-2020-12337	12 Nov 202019:15	–	osv
Prion	Buffer overflow	12 Nov 202019:15	–	prion
RedhatCVE	CVE-2020-12337	9 Jan 202609:54	–	redhatcve
ThreatPost	Colossal Intel Update Anchored by Critical Privilege-Escalation Bugs	10 Nov 202020:59	–	threatpost

NVD

Node

intel nuc_8_mainstream-g_kit_nuc8i5inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_kit_nuc8i5inhMatch-

Node

intel nuc_8_mainstream-g_kit_nuc8i7inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_kit_nuc8i7inhMatch-

Node

intel nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_mini_pc_nuc8i5inhMatch-

Node

intel nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_mini_pc_nuc8i7inhMatch-

Node

intel nuc_8_pro_board_nuc8i3pnb_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_board_nuc8i3pnbMatch-

Node

intel nuc_8_pro_kit_nuc8i3pnh_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_kit_nuc8i3pnhMatch-

Node

intel nuc_8_pro_kit_nuc8i3pnk_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_kit_nuc8i3pnkMatch-

Node

intel nuc_8_pro_mini_pc_nuc8i3pnk_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_mini_pc_nuc8i3pnkMatch-

Node

intel nuc_8_rugged_kit_nuc8cchkr_firmwareMatchchaplcel.0049

AND

intel nuc_8_rugged_kit_nuc8cchkrMatch-

Node

intel nuc_9_pro_kit_nuc9v7qnx_firmwareMatchqncflx70.34

AND

intel nuc_9_pro_kit_nuc9v7qnxMatch-

Node

intel nuc_9_pro_kit_nuc9vxqnx_firmwareMatchqncflx70.34

AND

intel nuc_9_pro_kit_nuc9vxqnxMatch-

Node

intel nuc_board_h27002-400_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-400Match-

Node

intel nuc_board_h27002-401_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-401Match-

Node

intel nuc_board_h27002-402_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-402Match-

Node

intel nuc_board_h27002-404_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-404Match-

Node

intel nuc_board_h27002-500_firmwareMatchtybyt20h.86a

AND

intel nuc_board_h27002-500Match-

Node

intel nuc_board_nuc8cchb_firmwareMatchchaplcel.0049

AND

intel nuc_board_nuc8cchbMatch-

Node

intel nuc_kit_h26998-401_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-401Match-

Node

intel nuc_kit_h26998-402_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-402Match-

Node

intel nuc_kit_h26998-403_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-403Match-

Node

intel nuc_kit_h26998-404_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-404Match-

Node

intel nuc_kit_h26998-405_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-405Match-

Node

intel nuc_kit_h26998-500_firmwareMatchtybyt20h.86a

AND

intel nuc_kit_h26998-500Match-

[
  {
    "product": "Intel(R) NUCs",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414

21 Nov 2024 04:59Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.6

CVSS 3.16.7

EPSS0.00063