CVE-2020-12337
Estado: ModificadaMedia (6.7)—
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 6.7
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.32%
- Percentil entre todas las CVEs puntuadas: 23
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (23)
Intel — NUC 8 Mainstream-g KIT Nuc8i5inh FirmwareIntel — NUC 8 Mainstream-g KIT Nuc8i7inh FirmwareIntel — NUC 8 Mainstream-g Mini PC Nuc8i5inh FirmwareIntel — NUC 8 Mainstream-g Mini PC Nuc8i7inh FirmwareIntel — NUC 8 PRO Board Nuc8i3pnb FirmwareIntel — NUC 8 PRO KIT Nuc8i3pnh FirmwareIntel — NUC 8 PRO KIT Nuc8i3pnk FirmwareIntel — NUC 8 PRO Mini PC Nuc8i3pnk FirmwareIntel — NUC 8 Rugged KIT Nuc8cchkr FirmwareIntel — NUC 9 PRO KIT Nuc9v7qnx FirmwareIntel — NUC 9 PRO KIT Nuc9vxqnx FirmwareIntel — NUC Board H27002-400 FirmwareIntel — NUC Board H27002-401 FirmwareIntel — NUC Board H27002-402 FirmwareIntel — NUC Board H27002-404 FirmwareIntel — NUC Board H27002-500 FirmwareIntel — NUC Board Nuc8cchb FirmwareIntel — NUC KIT H26998-401 FirmwareIntel — NUC KIT H26998-402 FirmwareIntel — NUC KIT H26998-403 FirmwareIntel — NUC KIT H26998-404 FirmwareIntel — NUC KIT H26998-405 FirmwareIntel — NUC KIT H26998-500 Firmware
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-12337",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.7,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.8
}
]
},
"affected": [
{
"source": "secure@intel.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Intel(R) NUCs",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
]
}
],
"published": "2020-11-12T19:15:14.067",
"references": [
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414",
"tags": [
"Vendor Advisory"
],
"source": "secure@intel.com"
},
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access."
},
{
"lang": "es",
"value": "Unas restricciones de búfer inapropiadas en el firmware para algunos Intel® NUCs pueden habilitar a un usuario privilegiado para permitir potencialmente una escalada de privilegios por medio de un acceso local"
}
],
"lastModified": "2026-06-17T02:51:39.703",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_mainstream-g_kit_nuc8i5inh_firmware:inwhl357.0036:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99E99F9F-8989-4231-A903-320894606A99"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_mainstream-g_kit_nuc8i5inh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "18330FCA-FFDE-4B0E-8703-1DAE0633C053"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_mainstream-g_kit_nuc8i7inh_firmware:inwhl357.0036:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C4C6DAF-C399-4899-919D-36AB585E5675"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_mainstream-g_kit_nuc8i7inh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE7FB4D7-3AED-4BBD-9655-6C300FC08218"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware:inwhl357.0036:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91387974-52EC-4797-9E01-9BA59C4759D2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_mainstream-g_mini_pc_nuc8i5inh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7E95098F-4682-4645-A61F-15BDAA5A54BC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware:inwhl357.0036:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C38AD6D5-0868-429B-87D2-302C942C29AF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_mainstream-g_mini_pc_nuc8i7inh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "13AA1F39-F562-4CB9-A9EF-BE4213E809B3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_pro_board_nuc8i3pnb_firmware:pnwhl357.0037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5A58245-FD3D-4A1B-B749-793247160E51"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_pro_board_nuc8i3pnb:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "423CC75A-A2F2-4697-B61C-0D577CFD2E26"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_pro_kit_nuc8i3pnh_firmware:pnwhl357.0037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4EF1055-A110-45E5-91E5-28FAF56667BA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_pro_kit_nuc8i3pnh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DCB8ABDE-3692-4CF2-89C4-CC69B9756A82"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_pro_kit_nuc8i3pnk_firmware:pnwhl357.0037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07A90F26-F3C6-4329-AD44-00D4CADDF415"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_pro_kit_nuc8i3pnk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6086D66C-80C1-4A92-A1EB-E3F11ED55A8D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_pro_mini_pc_nuc8i3pnk_firmware:pnwhl357.0037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B5BE2B8-411B-4BE1-9043-6618B095A2A7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_pro_mini_pc_nuc8i3pnk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62A579AA-8562-4BB6-9F61-291C451CC4BF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_8_rugged_kit_nuc8cchkr_firmware:chaplcel.0049:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFFFAE5D-1E41-4245-842D-1DFD225D86EC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_8_rugged_kit_nuc8cchkr:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63F604D7-3A72-412C-8FA6-9C9076AE8F2A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_9_pro_kit_nuc9v7qnx_firmware:qncflx70.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6940E1B7-7618-4408-B517-0BA1A6B99362"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_9_pro_kit_nuc9v7qnx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2613E78B-477C-4CC1-80B8-B3D23C40C7B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_9_pro_kit_nuc9vxqnx_firmware:qncflx70.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A3B90ED-E487-481B-A6A3-F27B83C4628F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_9_pro_kit_nuc9vxqnx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "870E5CEB-279E-47A7-92D3-47C53FF66D86"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_h27002-400_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B032A942-9C6E-4B72-99A2-E2A0F9C8C822"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_h27002-400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "29E0ED9D-48FF-47FF-A08D-8A3B15692C25"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_h27002-401_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "710AF53A-0FFD-45DD-B16F-FC9BD01C16FC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_h27002-401:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3EB3E430-3415-4A18-AC75-BD2393E1F732"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_h27002-402_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A52D144-7917-4932-A3BC-DE40DE0C3C60"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_h27002-402:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5E868347-E407-4D99-96C1-BF6024BFC029"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_h27002-404_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99FA6D9D-4CD0-4CD8-8D46-A6E8BB7C538A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_h27002-404:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3B09A395-F263-487A-9373-E47C0309E1DA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_h27002-500_firmware:tybyt20h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B62A359-6B45-4A78-ACFC-61F5B6DAADF1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_h27002-500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0062C296-DB3C-47F4-BF3B-73384E4123F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_board_nuc8cchb_firmware:chaplcel.0049:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11F6C965-2B39-4541-91CB-5B43C63CB1DD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_board_nuc8cchb:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FEDDEDB3-82C2-4A71-B72C-14028894A71A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-401_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFD2C910-6C6B-4E46-83BD-732363D15F9C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-401:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "969E7B4F-310B-4533-9169-DA3667FFF793"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-402_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5AC1AF4-AD27-42E1-9505-9480499066C6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-402:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "27CF699D-F8FB-4EE0-BA15-C3CE679AA4D5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-403_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E70C4B5-9367-4725-9384-8CF2537EFFC0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-403:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A8F44746-AD44-486A-8EA6-13803A8BA6A6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-404_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69866711-8389-4BCA-9A08-B9101C3CD55E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-404:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98732935-F726-4A0F-BE5D-0F099395ED45"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-405_firmware:tybyt10h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD30C573-D10F-472D-B7D7-EA367C5DE198"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-405:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E269DBB0-F2FE-49A4-857A-BAB027FB17F7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:nuc_kit_h26998-500_firmware:tybyt20h.86a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90AEFD53-E35C-4C4C-AF84-3F42E84A7E50"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:nuc_kit_h26998-500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "290C4862-FA44-4BB6-9B0F-84C900102020"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "secure@intel.com"
}