Buffer overflow

Improper buffer restrictions in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12337

Improper buffer restrictions in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12337

CVE-2020-12337 concerns Intel NUC firmware where an improper buffer restriction in the NUC firmware could allow a privileged user with local access to escalate privileges. The Red Hat advisories and Intel’s advisory confirm this CVE-2020-12337 issue alongside related NUC firmware flaws (e.g., CVE...

CVE-2020-12336

The CVE-2020-12336 entry affects Intel NUC firmware, where insecure default variable initialization in the firmware may allow an authenticated user with local access to escalate privileges. Red Hat’s advisory and the Intel Intel-SA-00414 page corroborate the local-privilege-escalation risk. The C...

CVE-2020-12336

Insecure default variable initialization in firmware for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8685

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

Authentication flaw

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

CVE-2020-8685

Intel® LED Manager for NUC before version 1.2.3 contains an improper authentication vulnerability that may allow a privileged local user to trigger a denial of service. The Intel advisory Intel‑SA‑00376 confirms affected versions and recommends updating to 1.2.3 or later. CVSSv3.1 base score 4.4 ...

CVE-2020-8742

Improper input validation in the firmware for IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in the firmware for IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8742

Intel’s advisory CVE-2020-8742 describes an improper input validation vulnerability in the firmware for Intel NUCs that could allow a local attacker to escalate privileges. Affected products include multiple Intel NUC models and compute sticks; the underlying issue is in the NUC firmware’s input ...

Intel® NUC Firmware Advisory

Summary: A potential security vulnerability for some Intel® NUCs may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8742 Description: Improper input validation in the firmware for IntelR NUCs may...

Intel® LED Manager for NUC Advisory

Summary: A potential security vulnerability in the Intel® LED Manager for NUC may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8685 Description: Improper authentication in subsystem for Intel R LED...

CVE-2020-0600

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0600

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

Buffer overflow

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0600

Intel NUC firmware vulnerability CVE-2020-0600: Improper buffer restrictions may allow an authenticated, local user to escalate privileges. Intel INTEL-SA-00363 lists CVSS v3.1 base score 7.8 (HIGH) and affected models (NUC8CCHKR, NUC8CCHB, NUC7CJYSAL, NUC7PJYH, NUC7CJYH, NUC6CAYS, NUC6CAYH, DE38...

Intel Fixes High-Severity Flaws in NUC, Discontinues Buggy Compute Module

Intel has stomped out high-severity flaws in its Next Unit Computing NUC mini PC firmware, and in its Modular Server MFS2600KISPP Compute Module. Overall, Intel addressed nine vulnerabilities across six products in its April security update – two of those being high-severity, and the rest being...

Intel® NUC Firmware Advisory

Summary: A potential security vulnerability in system firmware for some Intel® NUC may allow escalation of privilege. Intel is releasing a firmware update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0600 Description: Improper buffer restrictions in firmware fo...