Sign-up

ID

VAR-202004-0093


CVE

CVE-2020-0600


TITLE

Intel(R) NUC Vulnerability related to authority management in

Trust: 0.8

sources: JVNDB: JVNDB-2020-004600

DESCRIPTION

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. Intel(R) NUC Exists in a privilege management vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Intel NUC Kit is a small desktop computer from Intel Corporation. The firmware in Intel NUC has a buffer error vulnerability. Local attackers can use this vulnerability to elevate permissions

Trust: 2.16

sources: NVD: CVE-2020-0600 // JVNDB: JVNDB-2020-004600 // CNVD: CNVD-2020-28233

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-28233

AFFECTED PRODUCTS

vendor:intelmodel:nuc 8 rugged kit nuc8cchkrscope:ltversion:chaplcel.0047

Trust: 1.0

vendor:intelmodel:nuc kit de3815tykhescope:ltversion:tybyt20h.86a.0024

Trust: 1.0

vendor:intelmodel:nuc kit nuc7pjyhscope:ltversion:jyglkcpx.86a.0053

Trust: 1.0

vendor:intelmodel:compute stick stck1a32wfcscope:ltversion:fcbyt10h.86a

Trust: 1.0

vendor:intelmodel:nuc kit nuc7cjyhscope:ltversion:jyglkcpx.86a.0053

Trust: 1.0

vendor:intelmodel:nuc board de3815tybescope:ltversion:tybyt20h.86a.0024

Trust: 1.0

vendor:intelmodel:nuc 7 essential pc nuc7cjysalscope:ltversion:jyglkcpx.86a.0053

Trust: 1.0

vendor:intelmodel:nuc kit nuc6cayhscope:ltversion:ayaplcel.86a0053

Trust: 1.0

vendor:intelmodel:nuc kit nuc6caysscope:ltversion:ayaplcel.86a0053

Trust: 1.0

vendor:intelmodel:nuc board nuc8cchbscope:ltversion:chaplcel.0047

Trust: 1.0

vendor:intelmodel:compute stick stck1a32wfcscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc 7 essential pc nuc7cjysalscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc 8 rugged kit nuc8cchkrscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc board de3815tybescope: - version: -

Trust: 0.8

vendor:intelmodel:nuc board nuc8cchbscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kit de3815tykhescope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kit nuc6cayhscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kit nuc6caysscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kit nuc7cjyhscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kit nuc7pjyhscope: - version: -

Trust: 0.8

vendor:intelmodel:compute stick stck1a32wfc fcbyt10h.86ascope: - version: -

Trust: 0.6

vendor:intelmodel:nuc board de3815tybe tybyt20h.86a.0024scope: - version: -

Trust: 0.6

vendor:intelmodel:nuc kit de3815tykhe tybyt20h.86a.0024scope: - version: -

Trust: 0.6

vendor:intelmodel:nuc kit nuc6cayh ayaplcel.86a.0066scope: - version: -

Trust: 0.6

vendor:intelmodel:nuc kit nuc7pjyh jyglkcpx.86a.0053scope: - version: -

Trust: 0.6

vendor:intelmodel:nuc essential pc nuc7cjysal jyglkcpx.86a.0053scope:eqversion:7

Trust: 0.6

vendor:intelmodel:nuc board nuc8cchb chaplcel.0047scope: - version: -

Trust: 0.6

vendor:intelmodel:nuc rugged kit nuc8cchkr chaplcel.0047scope:eqversion:8

Trust: 0.6

sources: CNVD: CNVD-2020-28233 // JVNDB: JVNDB-2020-004600 // NVD: CVE-2020-0600

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-0600
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-004600
value: HIGH

Trust: 0.8

CNVD: CNVD-2020-28233
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-202004-1095
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2020-0600
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

NVD: JVNDB-2020-004600
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2020-28233
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2020-0600
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-004600
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2020-28233 // JVNDB: JVNDB-2020-004600 // CNNVD: CNNVD-202004-1095 // NVD: CVE-2020-0600

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:CWE-269

Trust: 0.8

sources: JVNDB: JVNDB-2020-004600 // NVD: CVE-2020-0600

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202004-1095

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202004-1095

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2020-004600

PATCH
title:INTEL-SA-00363url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00363.html
Trust: 0.8
title:Patch for Intel NUC buffer overflow vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/217447
Trust: 0.6
title:Intel NUC Buffer error vulnerability fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=116007
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2020-28233 // 
            
            
            
            JVNDB: JVNDB-2020-004600 // 
            
            
            
            CNNVD: CNNVD-202004-1095

EXTERNAL IDS
db:NVDid:CVE-2020-0600
Trust: 3.0
db:JVNDBid:JVNDB-2020-004600
Trust: 0.8
db:CNVDid:CNVD-2020-28233
Trust: 0.6
db:AUSCERTid:ESB-2020.1300
Trust: 0.6
db:CNNVDid:CNNVD-202004-1095
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2020-28233 // 
            
            
            
            JVNDB: JVNDB-2020-004600 // 
            
            
            
            CNNVD: CNNVD-202004-1095 // 
            
            
            
            NVD: CVE-2020-0600

REFERENCES
url:https://nvd.nist.gov/vuln/detail/cve-2020-0600
Trust: 2.0
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00363.html
Trust: 1.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-0600
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2020.1300/
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2020-28233 // 
            
            
            
            JVNDB: JVNDB-2020-004600 // 
            
            
            
            CNNVD: CNNVD-202004-1095 // 
            
            
            
            NVD: CVE-2020-0600

SOURCES
db:CNVDid:CNVD-2020-28233
db:JVNDBid:JVNDB-2020-004600
db:CNNVDid:CNNVD-202004-1095
db:NVDid:CVE-2020-0600

LAST UPDATE DATE
2024-11-23T22:21:13.878000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2020-28233date:2020-05-14T00:00:00
db:JVNDBid:JVNDB-2020-004600date:2020-05-21T00:00:00
db:CNNVDid:CNNVD-202004-1095date:2020-04-21T00:00:00
db:NVDid:CVE-2020-0600date:2024-11-21T04:53:49.980

SOURCES RELEASE DATE
db:CNVDid:CNVD-2020-28233date:2020-05-14T00:00:00
db:JVNDBid:JVNDB-2020-004600date:2020-05-21T00:00:00
db:CNNVDid:CNNVD-202004-1095date:2020-04-15T00:00:00
db:NVDid:CVE-2020-0600date:2020-04-15T17:15:14.327