What is the CVSS score of CVE-2020-8742?

CVE-2020-8742 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2020-8742?

Yes, a patch is available for CVE-2020-8742. Update the affected software to the latest version immediately.

Nuc7I7Bnh Firmware CVE-2020-8742

MEDIUM

Improper Input Validation (CWE-20)

2020-08-13 secure@intel.com

Privilege Escalation Intel Nuc7I7Bnh Firmware Nuc7I5Bnh Firmware Nuc7I5Bnk Firmware Nuc7I3Bnh Firmware Nuc7I3Bnk Firmware Nuc8I7Bek Firmware Cd1P64Gk Firmware Nuc8I7Hnk Firmware Nuc7I7Dnke Firmware Nuc7I5Dnke Firmware Nuc7I3Dnhe Firmware Stk2Mv64Cc Firmware Nuc6I7Kyk Firmware Nuc7Cjyh Firmware Nuc6Cays Firmware De3815Tybe Firmware Nuc8I7Behga Firmware Nuc8I7Bekqa Firmware Nuc8I3Behfa Firmware Nuc8I5Behfa Firmware Nuc8I5Bekpa Firmware Nuc8I3Beh Firmware Nuc8I3Behs Firmware Nuc8I3Bek Firmware Nuc8I5Beh Firmware Nuc8I5Behs Firmware Nuc8I5Bek Firmware Nuc8I7Beh Firmware Cd1C32Gk Firmware Cd1C64Gk Firmware Nuc8I7Hnkqc Firmware Nuc8I7Hvkva Firmware Nuc8I7Hvkvaw Firmware Nuc8I7Hvk Firmware Nuc7I7Dnbe Firmware Nuc7I7Dnhe Firmware Nuc7I5Dnkpc Firmware Nuc7I5Dnbe Firmware Nuc7I5Dnhe Firmware Nuc7I3Dnhnc Firmware Nuc7I3Dnktc Firmware Nuc7I3Dnbe Firmware Nuc7I3Dnke Firmware Nuc7Cjysal Firmware Nuc7Pjyh Firmware Nuc7I7Bnhxg Firmware Nuc7I7Bnkq Firmware Nuc7I3Bnhxf Firmware Nuc7I5Bnhxf Firmware Nuc7I5Bnkp Firmware Nuc7I3Bnb Firmware Nuc7I5Bnb Firmware Nuc7I7Bnb Firmware Nuc7I3Bnhx1 Firmware Nuc7I5Bnhx1 Firmware Nuc7I7Bnhx1 Firmware Nuc6Cayh Firmware De3815Tykhe Firmware Nuc5Cpyh Firmware Nuc5Pgyh Firmware Nuc5Ppyh Firmware Nuc5I3Ryh Firmware Nuc5I3Ryhs Firmware Nuc5I3Ryhsn Firmware Nuc5I3Ryk Firmware Nuc5I5Ryh Firmware Nuc5I5Ryhs Firmware Nuc5I5Ryk Firmware Nuc5I7Ryh Firmware Nuc5I5Mybe Firmware Nuc5I5Myhe Firmware Nuc5I3Mybe Firmware Nuc5I3Myhe Firmware

6.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 13, 2020 - 03:15 nvd

MEDIUM 6.7

DescriptionNVD

Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Nuc8I7Behga Firmware, Intel Nuc8I7Bekqa Firmware, Intel Nuc8I3Behfa Firmware, Intel Nuc8I5Behfa Firmware, Intel Nuc8I5Bekpa Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.