CVE-2020-24525 : Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

Published 2020-11-12 19:15:15

Updated 2021-07-21 11:39:24

Source Intel Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-24525

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-24525

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-24525

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-24525

Products affected by CVE-2020-24525

Intel » Nuc 8 Mainstream-g Kit Nuc8i7inh Firmware » Version: Inwhl357.0036
cpe:2.3:o:intel:nuc_8_mainstream-g_kit_nuc8i7inh_firmware:inwhl357.0036:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream-g Kit Nuc8i7inh » Version: N/A
Intel » Nuc 8 Mainstream-g Kit Nuc8i5inh Firmware » Version: Inwhl357.0036
cpe:2.3:o:intel:nuc_8_mainstream-g_kit_nuc8i5inh_firmware:inwhl357.0036:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream-g Kit Nuc8i5inh » Version: N/A
Intel » Nuc 8 Mainstream-g Mini Pc Nuc8i7inh Firmware » Version: Inwhl357.0036
cpe:2.3:o:intel:nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware:inwhl357.0036:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream-g Mini Pc Nuc8i7inh » Version: N/A
Intel » Nuc 8 Rugged Kit Nuc8cchkr Firmware » Version: Chaplcel.0049
cpe:2.3:o:intel:nuc_8_rugged_kit_nuc8cchkr_firmware:chaplcel.0049:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Rugged Kit Nuc8cchkr » Version: N/A
Intel » Nuc Board Nuc8cchb Firmware » Version: Chaplcel.0049
cpe:2.3:o:intel:nuc_board_nuc8cchb_firmware:chaplcel.0049:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board Nuc8cchb » Version: N/A
Intel » Nuc 8 Mainstream-g Mini Pc Nuc8i5inh Firmware » Version: Inwhl357.0036
cpe:2.3:o:intel:nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware:inwhl357.0036:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream-g Mini Pc Nuc8i5inh » Version: N/A
Intel » Nuc 8 Pro Board Nuc8i3pnb Firmware » Version: Pnwhl357.0037
cpe:2.3:o:intel:nuc_8_pro_board_nuc8i3pnb_firmware:pnwhl357.0037:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Pro Board Nuc8i3pnb » Version: N/A
Intel » Nuc 8 Pro Kit Nuc8i3pnh Firmware » Version: Pnwhl357.0037
cpe:2.3:o:intel:nuc_8_pro_kit_nuc8i3pnh_firmware:pnwhl357.0037:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Pro Kit Nuc8i3pnh » Version: N/A
Intel » Nuc 8 Pro Kit Nuc8i3pnk Firmware » Version: Pnwhl357.0037
cpe:2.3:o:intel:nuc_8_pro_kit_nuc8i3pnk_firmware:pnwhl357.0037:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Pro Kit Nuc8i3pnk » Version: N/A
Intel » Nuc 8 Pro Mini Pc Nuc8i3pnk Firmware » Version: Pnwhl357.0037
cpe:2.3:o:intel:nuc_8_pro_mini_pc_nuc8i3pnk_firmware:pnwhl357.0037:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Pro Mini Pc Nuc8i3pnk » Version: N/A
Intel » Nuc 9 Pro Kit Nuc9v7qnx Firmware » Version: Qncflx70.34
cpe:2.3:o:intel:nuc_9_pro_kit_nuc9v7qnx_firmware:qncflx70.34:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 9 Pro Kit Nuc9v7qnx » Version: N/A
Intel » Nuc 9 Pro Kit Nuc9vxqnx Firmware » Version: Qncflx70.34
cpe:2.3:o:intel:nuc_9_pro_kit_nuc9vxqnx_firmware:qncflx70.34:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 9 Pro Kit Nuc9vxqnx » Version: N/A
Intel » Nuc Board H27002-400 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_board_h27002-400_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board H27002-400 » Version: N/A
Intel » Nuc Board H27002-401 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_board_h27002-401_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board H27002-401 » Version: N/A
Intel » Nuc Board H27002-402 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_board_h27002-402_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board H27002-402 » Version: N/A
Intel » Nuc Board H27002-404 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_board_h27002-404_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board H27002-404 » Version: N/A
Intel » Nuc Board H27002-500 Firmware » Version: Tybyt20h.86a
cpe:2.3:o:intel:nuc_board_h27002-500_firmware:tybyt20h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Board H27002-500 » Version: N/A
Intel » Nuc Kit H26998-401 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_kit_h26998-401_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-401 » Version: N/A
Intel » Nuc Kit H26998-402 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_kit_h26998-402_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-402 » Version: N/A
Intel » Nuc Kit H26998-403 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_kit_h26998-403_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-403 » Version: N/A
Intel » Nuc Kit H26998-404 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_kit_h26998-404_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-404 » Version: N/A
Intel » Nuc Kit H26998-405 Firmware » Version: Tybyt10h.86a
cpe:2.3:o:intel:nuc_kit_h26998-405_firmware:tybyt10h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-405 » Version: N/A
Intel » Nuc Kit H26998-500 Firmware » Version: Tybyt20h.86a
cpe:2.3:o:intel:nuc_kit_h26998-500_firmware:tybyt20h.86a:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit H26998-500 » Version: N/A

Vulnerability Details : CVE-2020-24525

Exploit prediction scoring system (EPSS) score for CVE-2020-24525

CVSS scores for CVE-2020-24525

CWE ids for CVE-2020-24525

References for CVE-2020-24525

Products affected by CVE-2020-24525