CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-12336
High (7.8) in intel. EPSS 0.3% chance of exploitation in the next 30 days.
Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1188
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:nuc_8_mainstream-g_kit_nuc8i5inh_firmware
- intel:nuc_8_mainstream-g_kit_nuc8i7inh_firmware
- intel:nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware
- intel:nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware
- intel:nuc_8_pro_board_nuc8i3pnb_firmware
- intel:nuc_8_pro_kit_nuc8i3pnh_firmware
- intel:nuc_8_pro_kit_nuc8i3pnk_firmware
- intel:nuc_8_pro_mini_pc_nuc8i3pnk_firmware
- intel:nuc_8_rugged_kit_nuc8cchkr_firmware
- intel:nuc_9_pro_kit_nuc9v7qnx_firmware
- intel:nuc_9_pro_kit_nuc9vxqnx_firmware
- intel:nuc_board_h27002-400_firmware
- intel:nuc_board_h27002-401_firmware
- intel:nuc_board_h27002-402_firmware
- intel:nuc_board_h27002-404_firmware
- intel:nuc_board_h27002-500_firmware
- intel:nuc_board_nuc8cchb_firmware
- intel:nuc_kit_h26998-401_firmware
- intel:nuc_kit_h26998-402_firmware
- intel:nuc_kit_h26998-403_firmware
- intel:nuc_kit_h26998-404_firmware
- intel:nuc_kit_h26998-405_firmware
- intel:nuc_kit_h26998-500_firmware