High severity · published Apr 15, 2020
CVE-2020-0600
Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Compute Stick Stck1a32wfc Firmware · Intel
before fcbyt10h.86a · source: NVD
N7
Nuc 7 Essential PC Nuc7cjysal Firmware · Intel
before jyglkcpx.86a.0053 · source: NVD
N8
Nuc 8 Rugged Kit Nuc8cchkr Firmware · Intel
before chaplcel.0047 · source: NVD
NB
Nuc Board De3815tybe Firmware · Intel
before tybyt20h.86a.0024 · source: NVD
NB
Nuc Board Nuc8cchb Firmware · Intel
before chaplcel.0047 · source: NVD
NK
Nuc Kit De3815tykhe Firmware · Intel
before tybyt20h.86a.0024 · source: NVD
NK
Nuc Kit Nuc6cayh Firmware · Intel
before ayaplcel.86a0053 · source: NVD
NK
Nuc Kit Nuc6cays Firmware · Intel
before ayaplcel.86a0053 · source: NVD
NK
Nuc Kit Nuc7cjyh Firmware · Intel
before jyglkcpx.86a.0053 · source: NVD
NK
Nuc Kit Nuc7pjyh Firmware · Intel
before jyglkcpx.86a.0053 · source: NVD
Affected product
CS
Compute Stick Stck1a32wfc Firmware
Intel