Intel® NUC Firmware Advisory

Summary:

A potential security vulnerability in system firmware for some Intel® NUC may allow escalation of privilege. Intel is releasing a firmware update to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2020-0600

Description: Improper buffer restrictions in firmware for some Intel® NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.8 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products:

Product

|

Download link
(BIOS dl link)

—|—

Intel® NUC 8 Rugged Kit NUC8CCHKR

|

CHAPLCEL.0047

Intel® NUC Board NUC8CCHB

|

CHAPLCEL.0047

Intel® NUC 7 Essential PC NUC7CJYSAL

|

JYGLKCPX.86A.0053

Intel® NUC Kit NUC7CJYH

|

JYGLKCPX.86A.0053

Intel® NUC Kit NUC7PJYH

|

JYGLKCPX.86A.0053

Intel® NUC Kit NUC6CAYS

|

AYAPLCEL.86A.0066

Intel® NUC Kit NUC6CAYH

|

AYAPLCEL.86A.0066

Intel® NUC Kit DE3815TYKHE

|

TYBYT20H.86A.0024

Intel® NUC Board DE3815TYBE

|

TYBYT20H.86A.0024

Intel® Compute Stick STCK1A32WFC

|

FCBYT10H.86A

Recommendations:

Intel recommends that users update to the latest firmware version (see provided table).

Acknowledgements:

Intel would like to thank Dmitry Frolov for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.