Описание
Уязвимость встроенного программного обеспечения Intel NUC Kit связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии
Вендор
Intel Corp.
Наименование ПО
Intel NUC 8 Enthusiast PC NUC8i7BEKQA
Intel NUC 8 Enthusiast PC NUC8i7BEHGA
Intel NUC 8 Home NUC8i3BEHFA
Intel NUC 8 Home NUC8i5BEHFA
Intel NUC 8 Home NUC8i5BEKPA
Intel NUC Kit NUC8i3BEH
Intel NUC Kit NUC8i3BEHS
Intel NUC Kit NUC8i3BEK
Intel NUC Kit NUC8i5BEH
Intel NUC Kit NUC8i5BEHS
Intel NUC Kit NUC8i5BEK
Intel NUC Kit NUC8i7BEH
Intel NUC Kit NUC8i7BEK
Intel Compute Card CD1C32GK
Intel Compute Card CD1C64GK
Intel Compute Card CD1P64GK
Intel NUC 8 Business PC NUC8i7HNKQC
Intel NUC 8 Enthusiast NUC8i7HVKVA
Intel NUC 8 Enthusiast NUC8i7HVKVAW
Intel NUC Kit NUC8i7HNK
Intel NUC Kit NUC8i7HVK
Intel NUC Board NUC7i7DNBE
Intel NUC Kit NUC7i7DNHE
Intel NUC Kit NUC7i7DNKE
Intel NUC 7 Business NUC7i5DNKPC
Intel NUC Board NUC7i5DNBE
Intel NUC Kit NUC7i5DNHE
Intel NUC Kit NUC7i5DNKE
Intel NUC 7 Business NUC7i3DNHNC
Intel NUC 7 Business NUC7i3DNKTC
Intel NUC Board NUC7i3DNBE
Intel NUC Kit NUC7i3DNHE
Intel NUC Kit NUC7i3DNKE
Intel Compute Stick STK2MV64CC
Intel NUC Kit NUC6i7KYk
Intel NUC 7 Essential
Intel NUC Kit NUC7CJYH
Intel NUC Kit NUC7PJYH
Intel NUC 7 Enthusiast PC NUC7i7BNHXG
Intel NUC 7 Enthusiast NUC7i7BNKQ
Intel NUC 7 Home NUC7i3BNHXF
Intel NUC 7 Home NUC7i5BNHXF
Intel NUC 7 Home NUC7i5BNKP
Intel NUC Board NUC7i3BNB
Intel NUC Board NUC7i5BNB
Intel NUC Board NUC7i7BNB
Intel NUC Kit NUC7i3BNH
Intel NUC Kit NUC7i3BNHX1
Intel NUC Kit NUC7i3BNK
Intel NUC Kit NUC7i5BNK
Intel NUC Kit NUC7i5BNHX1
Intel NUC Kit NUC7i7BNH
Intel NUC Kit NUC7i7BNHX1
Intel NUC Kit NUC6CAYH
Intel NUC Kit NUC6CAYS
Intel NUC Board DE3815TYBE
Intel NUC Kit DE3815TYKHE
Intel NUC Kit NUC5CPYH
Intel NUC Kit NUC5PGYH
Intel NUC Kit NUC5PPYH
Intel NUC Kit NUC5i3RYH
Intel NUC Kit NUC5i3RYHS
Intel NUC Kit NUC5i3RYHSN
Intel NUC Kit NUC5i3RYK
Intel NUC Kit NUC5i5RYH
Intel NUC Kit NUC5i5RYHS
Intel NUC Kit NUC5i5RYK
Intel NUC Kit NUC5i7RYH
Intel NUC Board NUC5i5MYBE
Intel NUC Kit NUC5i5MYHE
Intel NUC Board NUC5i3MYBE
Intel NUC Kit NUC5i3MYHE
Версия ПО
до BECFL357.86A (Intel NUC 8 Enthusiast PC NUC8i7BEKQA)
до BECFL357.86A (Intel NUC 8 Enthusiast PC NUC8i7BEHGA)
до BECFL357.86A (Intel NUC 8 Home NUC8i3BEHFA)
до BECFL357.86A (Intel NUC 8 Home NUC8i5BEHFA)
до BECFL357.86A (Intel NUC 8 Home NUC8i5BEKPA)
до BECFL357.86A (Intel NUC Kit NUC8i3BEH)
до BECFL357.86A (Intel NUC Kit NUC8i3BEHS)
до BECFL357.86A (Intel NUC Kit NUC8i3BEK)
до BECFL357.86A (Intel NUC Kit NUC8i5BEH)
до BECFL357.86A (Intel NUC Kit NUC8i5BEHS)
до BECFL357.86A (Intel NUC Kit NUC8i5BEK)
до BECFL357.86A (Intel NUC Kit NUC8i7BEH)
до BECFL357.86A (Intel NUC Kit NUC8i7BEK)
до GKAPLCPX.86A (Intel Compute Card CD1C32GK)
до GKAPLCPX.86A (Intel Compute Card CD1C64GK)
до GKAPLCPX.86A (Intel Compute Card CD1P64GK)
до HNKBLi70.86A (Intel NUC 8 Business PC NUC8i7HNKQC)
до HNKBLi70.86A (Intel NUC 8 Enthusiast NUC8i7HVKVA)
до HNKBLi70.86A (Intel NUC 8 Enthusiast NUC8i7HVKVAW)
до HNKBLi70.86A (Intel NUC Kit NUC8i7HNK)
до HNKBLi70.86A (Intel NUC Kit NUC8i7HVK)
до DNKBLi7v.86A (Intel NUC Board NUC7i7DNBE)
до DNKBLi7v.86A (Intel NUC Kit NUC7i7DNHE)
до DNKBLi7v.86A (Intel NUC Kit NUC7i7DNKE)
до DNKBLi5v.86A (Intel NUC 7 Business NUC7i5DNKPC)
до DNKBLi5v.86A (Intel NUC Board NUC7i5DNBE)
до DNKBLi5v.86A (Intel NUC Kit NUC7i5DNHE)
до DNKBLi5v.86A (Intel NUC Kit NUC7i5DNKE)
до DNKBLi30.86A (Intel NUC 7 Business NUC7i3DNHNC)
до DNKBLi30.86A (Intel NUC 7 Business NUC7i3DNKTC)
до DNKBLi30.86A (Intel NUC Board NUC7i3DNBE)
до DNKBLi30.86A (Intel NUC Kit NUC7i3DNHE)
до DNKBLi30.86A (Intel NUC Kit NUC7i3DNKE)
до CCSKLm5v.86A (Intel Compute Stick STK2MV64CC)
до KYSKLi70.86A (Intel NUC Kit NUC6i7KYk)
до JYGLKCPX.86A (Intel NUC 7 Essential)
до JYGLKCPX.86A (Intel NUC Kit NUC7CJYH)
до JYGLKCPX.86A (Intel NUC Kit NUC7PJYH)
до BNKBL357.86A (Intel NUC 7 Enthusiast PC NUC7i7BNHXG)
до BNKBL357.86A (Intel NUC 7 Enthusiast NUC7i7BNKQ)
до BNKBL357.86A (Intel NUC 7 Home NUC7i3BNHXF)
до BNKBL357.86A (Intel NUC 7 Home NUC7i5BNHXF)
до BNKBL357.86A (Intel NUC 7 Home NUC7i5BNKP)
до BNKBL357.86A (Intel NUC Board NUC7i3BNB)
до BNKBL357.86A (Intel NUC Board NUC7i5BNB)
до BNKBL357.86A (Intel NUC Board NUC7i7BNB)
до BNKBL357.86A (Intel NUC Kit NUC7i3BNH)
до BNKBL357.86A (Intel NUC Kit NUC7i3BNHX1)
до BNKBL357.86A (Intel NUC Kit NUC7i3BNK)
до BNKBL357.86A (Intel NUC Kit NUC7i5BNK)
до BNKBL357.86A (Intel NUC Kit NUC7i5BNHX1)
до BNKBL357.86A (Intel NUC Kit NUC7i7BNH)
до BNKBL357.86A (Intel NUC Kit NUC7i7BNHX1)
до AYAPLCEL.86A (Intel NUC Kit NUC6CAYH)
до AYAPLCEL.86A (Intel NUC Kit NUC6CAYS)
до TYBYT20H.86A (Intel NUC Board DE3815TYBE)
до TYBYT10H.86A (Intel NUC Board DE3815TYBE)
до TYBYT10H.86A (Intel NUC Kit DE3815TYKHE)
до PYBSWCEL.86A (Intel NUC Kit NUC5CPYH)
до PYBSWCEL.86A (Intel NUC Kit NUC5PGYH)
до PYBSWCEL.86A (Intel NUC Kit NUC5PPYH)
до RYBDWi35.86A (Intel NUC Kit NUC5i3RYH)
до RYBDWi35.86A (Intel NUC Kit NUC5i3RYHS)
до RYBDWi35.86A (Intel NUC Kit NUC5i3RYHSN)
до RYBDWi35.86A (Intel NUC Kit NUC5i3RYK)
до RYBDWi35.86A (Intel NUC Kit NUC5i5RYH)
до RYBDWi35.86A (Intel NUC Kit NUC5i5RYHS)
до RYBDWi35.86A (Intel NUC Kit NUC5i5RYK)
до RYBDWi35.86A (Intel NUC Kit NUC5i7RYH)
до MYBDWi5v.86A (Intel NUC Board NUC5i5MYBE)
до MYBDWi5v.86A (Intel NUC Kit NUC5i5MYHE)
до MYBDWi30.86A (Intel NUC Board NUC5i3MYBE)
до MYBDWi30.86A (Intel NUC Kit NUC5i3MYHE)
Тип ПО
Микропрограммный код
Операционные системы и аппаратные платформы
-
Уровень опасности уязвимости
Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6)
Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 7,1)
Возможные меры по устранению уязвимости
Использвание рекомендаций:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html
Статус уязвимости
Подтверждена производителем
Наличие эксплойта
Данные уточняются
Информация об устранении
Уязвимость устранена
Идентификаторы других систем описаний уязвимостей
- CVE
EPSS
Процентиль: 20%
0.00063
Низкий
7.5 High
CVSS3
6 Medium
CVSS2
Связанные уязвимости
CVSS3: 6.7
nvd
больше 5 лет назад
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
github
больше 3 лет назад
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
EPSS
Процентиль: 20%
0.00063
Низкий
7.5 High
CVSS3
6 Medium
CVSS2