Privilege escalation

2020-11-1219:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Insecure inherited permissions in firmware update tool for some Intel® NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
nuc_8_mainstream-g_kit_nuc8i5inh_firmwareeq357.36.0-inwhl
nuc_8_mainstream-g_kit_nuc8i7inh_firmwareeq357.36.0-inwhl
nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmwareeq357.36.0-inwhl
nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmwareeq357.36.0-inwhl
nuc_8_pro_board_nuc8i3pnb_firmwareeq357.37.0-pnwhl
nuc_8_pro_kit_nuc8i3pnh_firmwareeq357.37.0-pnwhl
nuc_8_pro_kit_nuc8i3pnk_firmwareeq357.37.0-pnwhl
nuc_8_pro_mini_pc_nuc8i3pnk_firmwareeq357.37.0-pnwhl
nuc_8_rugged_kit_nuc8cchkr_firmwareeq.49.0-chaplcel
nuc_9_pro_kit_nuc9v7qnx_firmwareeq70.34.0-qncflx

Name	Operator	Version
nuc_8_mainstream-g_kit_nuc8i5inh_firmware	eq	357.36.0-inwhl
nuc_8_mainstream-g_kit_nuc8i7inh_firmware	eq	357.36.0-inwhl
nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware	eq	357.36.0-inwhl
nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware	eq	357.36.0-inwhl
nuc_8_pro_board_nuc8i3pnb_firmware	eq	357.37.0-pnwhl
nuc_8_pro_kit_nuc8i3pnh_firmware	eq	357.37.0-pnwhl
nuc_8_pro_kit_nuc8i3pnk_firmware	eq	357.37.0-pnwhl
nuc_8_pro_mini_pc_nuc8i3pnk_firmware	eq	357.37.0-pnwhl
nuc_8_rugged_kit_nuc8cchkr_firmware	eq	.49.0-chaplcel
nuc_9_pro_kit_nuc9v7qnx_firmware	eq	70.34.0-qncflx