CVE-2020-24525

🗓️ 12 Nov 2020 18:16:05Reported by intelType

Insecure firmware update tool for Intel(R) NUCs, potential privilege escalatio

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2020-24525	12 Nov 202019:15	–	attackerkb
Circl	CVE-2020-24525	12 Nov 202022:32	–	circl
Cvelist	CVE-2020-24525	12 Nov 202018:16	–	cvelist
EUVD	EUVD-2020-17245	7 Oct 202500:30	–	euvd
Intel	Intel® NUC Firmware Advisory	10 Mar 202300:00	–	intel
NVD	CVE-2020-24525	12 Nov 202019:15	–	nvd
OSV	CVE-2020-24525	12 Nov 202019:15	–	osv
Prion	Privilege escalation	12 Nov 202019:15	–	prion
RedhatCVE	CVE-2020-24525	9 Jan 202609:49	–	redhatcve
Vulnerability Lab	Intel NUC - Privilege Escalation Vulnerability	13 Nov 202000:00	–	vulnerlab

NVD

Node

intel nuc_8_mainstream-g_kit_nuc8i5inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_kit_nuc8i5inhMatch-

Node

intel nuc_8_mainstream-g_kit_nuc8i7inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_kit_nuc8i7inhMatch-

Node

intel nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_mini_pc_nuc8i5inhMatch-

Node

intel nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmwareMatchinwhl357.0036

AND

intel nuc_8_mainstream-g_mini_pc_nuc8i7inhMatch-

Node

intel nuc_8_pro_board_nuc8i3pnb_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_board_nuc8i3pnbMatch-

Node

intel nuc_8_pro_kit_nuc8i3pnh_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_kit_nuc8i3pnhMatch-

Node

intel nuc_8_pro_kit_nuc8i3pnk_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_kit_nuc8i3pnkMatch-

Node

intel nuc_8_pro_mini_pc_nuc8i3pnk_firmwareMatchpnwhl357.0037

AND

intel nuc_8_pro_mini_pc_nuc8i3pnkMatch-

Node

intel nuc_8_rugged_kit_nuc8cchkr_firmwareMatchchaplcel.0049

AND

intel nuc_8_rugged_kit_nuc8cchkrMatch-

Node

intel nuc_9_pro_kit_nuc9v7qnx_firmwareMatchqncflx70.34

AND

intel nuc_9_pro_kit_nuc9v7qnxMatch-

Node

intel nuc_9_pro_kit_nuc9vxqnx_firmwareMatchqncflx70.34

AND

intel nuc_9_pro_kit_nuc9vxqnxMatch-

Node

intel nuc_board_h27002-400_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-400Match-

Node

intel nuc_board_h27002-401_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-401Match-

Node

intel nuc_board_h27002-402_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-402Match-

Node

intel nuc_board_h27002-404_firmwareMatchtybyt10h.86a

AND

intel nuc_board_h27002-404Match-

Node

intel nuc_board_h27002-500_firmwareMatchtybyt20h.86a

AND

intel nuc_board_h27002-500Match-

Node

intel nuc_board_nuc8cchb_firmwareMatchchaplcel.0049

AND

intel nuc_board_nuc8cchbMatch-

Node

intel nuc_kit_h26998-401_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-401Match-

Node

intel nuc_kit_h26998-402_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-402Match-

Node

intel nuc_kit_h26998-403_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-403Match-

Node

intel nuc_kit_h26998-404_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-404Match-

Node

intel nuc_kit_h26998-405_firmwareMatchtybyt10h.86a

AND

intel nuc_kit_h26998-405Match-

Node

intel nuc_kit_h26998-500_firmwareMatchtybyt20h.86a

AND

intel nuc_kit_h26998-500Match-

[
  {
    "product": "Intel(R) NUCs",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Nov/26
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414

21 Nov 2024 05:14Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00037

CWE-732