CVE-2020-24525: intel nuc 8 mainstream-g kit nuc8i5inh firmw…

csirt@kutim:~/threat-intel/cve/CVE-2020-24525

CVSS 7.8 · High EPSS 0,29%

Kerentanan Incorrect Permission Assignment for Critical Resource pada intel nuc 8 mainstream-g kit nuc8i5inh firmware, intel nuc 8 mainstream-g kit nuc8i7inh firmware +21 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

Rincian

Terbit di NVD: 12 November 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-732: Incorrect Permission Assignment for Critical Resource
EPSS (30 hari): 0,29% peluang dieksploitasi; lebih tinggi dari 20,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
intel	nuc 8 mainstream-g kit nuc8i5inh firmware	Versi inwhl357.0036
intel	nuc 8 mainstream-g kit nuc8i7inh firmware	Versi inwhl357.0036
intel	nuc 8 mainstream-g mini pc nuc8i5inh firmware	Versi inwhl357.0036
intel	nuc 8 mainstream-g mini pc nuc8i7inh firmware	Versi inwhl357.0036
intel	nuc 8 pro board nuc8i3pnb firmware	Versi pnwhl357.0037
intel	nuc 8 pro kit nuc8i3pnh firmware	Versi pnwhl357.0037
intel	nuc 8 pro kit nuc8i3pnk firmware	Versi pnwhl357.0037
intel	nuc 8 pro mini pc nuc8i3pnk firmware	Versi pnwhl357.0037
intel	nuc 8 rugged kit nuc8cchkr firmware	Versi chaplcel.0049
intel	nuc 9 pro kit nuc9v7qnx firmware	Versi qncflx70.34
intel	nuc 9 pro kit nuc9vxqnx firmware	Versi qncflx70.34
intel	nuc board h27002-400 firmware	Versi tybyt10h.86a
intel	nuc board h27002-401 firmware	Versi tybyt10h.86a
intel	nuc board h27002-402 firmware	Versi tybyt10h.86a
intel	nuc board h27002-404 firmware	Versi tybyt10h.86a
intel	nuc board h27002-500 firmware	Versi tybyt20h.86a
intel	nuc board nuc8cchb firmware	Versi chaplcel.0049
intel	nuc kit h26998-401 firmware	Versi tybyt10h.86a
intel	nuc kit h26998-402 firmware	Versi tybyt10h.86a
intel	nuc kit h26998-403 firmware	Versi tybyt10h.86a
intel	nuc kit h26998-404 firmware	Versi tybyt10h.86a
intel	nuc kit h26998-405 firmware	Versi tybyt10h.86a
intel	nuc kit h26998-500 firmware	Versi tybyt20h.86a

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414 advisory vendor
http://seclists.org/fulldisclosure/2020/Nov/26 mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.