Skip to main content

Nuc Board De3815Tybe Firmware CVE-2020-0526

MEDIUM
Improper Input Validation (CWE-20)
2020-03-12 secure@intel.com
Privilege Escalation Intel Nuc Board De3815Tybe Firmware Nuc Kit De3815Tykhe Firmware Nuc Kit Nuc8I7Bek Firmware Nuc 8 Enthusiast Pc Nuc8I7Bekqa Firmware Nuc Kit Nuc8I7Hnk Firmware Nuc 8 Business Pc Nuc8I7Hnkqc Firmware Nuc 8 Mainstream G Kit Nuc8I7Inh Firmware Nuc 8 Mainstream G Kit Nuc8I5Inh Firmware Nuc 8 Mainstream G Mini Pc Nuc8I7Inh Firmware Nuc 8 Rugged Kit Nuc8Cchkr Firmware Nuc Board Nuc8Cchb Firmware Nuc 8 Home Pc Nuc8I3Cysm Firmware Nuc Kit Nuc7I7Dnke Firmware Nuc Kit Nuc7I7Dnhe Firmware Nuc Kit Nuc7I5Dnke Firmware Nuc Kit Nuc7I5Dnhe Firmware Nuc Kit Nuc7I3Dnke Firmware Nuc Kit Nuc7I3Dnhe Firmware Nuc Board Nuc7I7Dnbe Firmware Nuc Board Nuc7I5Dnbe Firmware Nuc Board Nuc7I3Dnbe Firmware Compute Stick Stk2M3W64Cc Firmware Compute Stick Stk2M364Cc Firmware Compute Stick Stk1A32Sc Firmware Compute Stick Stk1Aw32Sc Firmware Nuc Kit Nuc6I7Kyk Firmware Nuc 7 Essential Pc Nuc7Cjysal Firmware Nuc Kit Nuc7Cjyh Firmware Nuc Kit Nuc7Pjyh Firmware Nuc Kit Nuc7I7Bnh Firmware Nuc Kit Nuc7I5Bnk Firmware Nuc Kit Nuc7I3Bnh Firmware Nuc Kit Nuc7I5Bnh Firmware Nuc Kit Nuc7I3Bnk Firmware Nuc Kit Nuc7I7Bnhx1 Firmware Nuc Kit Nuc7I5Bnhx1 Firmware Nuc Kit Nuc7I3Bnhx1 Firmware Nuc 7 Enthusiast Pc Nuc7I7Bnhxg Firmware Nuc 7 Home A Mini Pc Nuc7I5Bnhxf Firmware Nuc 7 Home A Mini Pc Nuc7I3Bnhxf Firmware Nuc 7 Home A Mini Pc Nuc7I5Bnkp Firmware Nuc Kit Nuc6Cays Firmware Nuc Kit Nuc6Cayh Firmware Nuc Kit Nuc6I3Syh Firmware Nuc Kit Nuc6I5Syh Firmware Nuc Kit Nuc6I3Syk Firmware Nuc Kit Nuc6I5Syk Firmware Nuc Kit Nuc5Pgyh Firmware Nuc Kit Nuc5Ppyh Firmware Nuc Kit Nuc5Cpyh Firmware Nuc Kit Nuc5I5Ryk Firmware Nuc Kit Nuc5I3Ryh Firmware Nuc Kit Nuc5I3Ryhs Firmware Nuc Kit Nuc5I3Ryhsn Firmware Nuc Kit Nuc5I3Ryk Firmware Nuc Kit Nuc5I5Ryh Firmware Nuc Kit Nuc5I5Ryhs Firmware Nuc Kit Nuc5I7Ryh Firmware Nuc Kit Nuc5I3Myhe Firmware Nuc Kit Nuc5I5Myhe Firmware Nuc Board Nuc5I5Mybe Firmware Nuc Board Nuc5I3Mybe Firmware Nuc Kit D54250Wyk Firmware Nuc Board D34010Wyb Firmware Nuc Board D54250Wyb Firmware Nuc Kit D34010Wyk Firmware Nuc Kit D34010Wykh Firmware Nuc Kit D54250Wykh Firmware Compute Stick Stck1A32Wfc Firmware Compute Stick Stck1A8Lfc Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 12, 2020 - 21:15 nvd
MEDIUM 6.7

DescriptionNVD

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

AnalysisAI

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html Affected products include: Intel Nuc Kit Nuc8I7Bek Firmware, Intel Nuc 8 Enthusiast Pc Nuc8I7Bekqa Firmware, Intel Nuc Kit Nuc8I7Hnk Firmware, Intel Nuc 8 Business Pc Nuc8I7Hnkqc Firmware, Intel Nuc 8 Mainstream-G Kit Nuc8I7Inh Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc Board De3815Tybe Firmware

View all
CVE-2020-0600 HIGH
7.8 Apr 15

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable esc
CVE-2020-0530 HIGH
7.8 Mar 12

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalati
CVE-2019-14570 HIGH
7.8 Oct 11

Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of pr
CVE-2019-14569 HIGH
7.8 Oct 11

Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p
CVE-2022-34152 MEDIUM
6.7 Nov 11

Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may all

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2020-0526 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy