Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.

  • Published: Nov 12, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-24525
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
intel / nuc_8_mainstream-g_kit_nuc8i5inh_firmware inwhl357.0036 inwhl357.0036.x
intel / nuc_8_mainstream-g_kit_nuc8i7inh_firmware inwhl357.0036 inwhl357.0036.x
intel / nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware inwhl357.0036 inwhl357.0036.x
intel / nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware inwhl357.0036 inwhl357.0036.x
intel / nuc_8_pro_board_nuc8i3pnb_firmware pnwhl357.0037 pnwhl357.0037.x
intel / nuc_8_pro_kit_nuc8i3pnh_firmware pnwhl357.0037 pnwhl357.0037.x
intel / nuc_8_pro_kit_nuc8i3pnk_firmware pnwhl357.0037 pnwhl357.0037.x
intel / nuc_8_pro_mini_pc_nuc8i3pnk_firmware pnwhl357.0037 pnwhl357.0037.x
intel / nuc_8_rugged_kit_nuc8cchkr_firmware chaplcel.0049 chaplcel.0049.x
intel / nuc_9_pro_kit_nuc9v7qnx_firmware qncflx70.34 qncflx70.34.x
intel / nuc_9_pro_kit_nuc9vxqnx_firmware qncflx70.34 qncflx70.34.x
intel / nuc_board_h27002-400_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_board_h27002-401_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_board_h27002-402_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_board_h27002-404_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_board_h27002-500_firmware tybyt20h.86a tybyt20h.86a.x
intel / nuc_board_nuc8cchb_firmware chaplcel.0049 chaplcel.0049.x
intel / nuc_kit_h26998-401_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_kit_h26998-402_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_kit_h26998-403_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_kit_h26998-404_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_kit_h26998-405_firmware tybyt10h.86a tybyt10h.86a.x
intel / nuc_kit_h26998-500_firmware tybyt20h.86a tybyt20h.86a.x