{"id":"CVE-2020-0526","aliases":["EUVD-2020-2024","GHSA-q895-6jw5-rqjr"],"status":"published","title":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially...","description":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00339,"percentile":0.27503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-03-12T20:02:31Z","modified":"2026-06-17T02:45:58Z","products":[{"vendor":"intel","product":"compute_stick_stck1a32wfc_firmware"},{"vendor":"intel","product":"compute_stick_stck1a8lfc_firmware"},{"vendor":"intel","product":"compute_stick_stk1a32sc_firmware"},{"vendor":"intel","product":"compute_stick_stk1aw32sc_firmware"},{"vendor":"intel","product":"compute_stick_stk2m364cc_firmware"},{"vendor":"intel","product":"compute_stick_stk2m3w64cc_firmware"},{"vendor":"intel","product":"intel(r) nuc firmware"},{"vendor":"intel","product":"nuc_7_enthusiast_pc_nuc7i7bnhxg_firmware"},{"vendor":"intel","product":"nuc_7_essential_pc_nuc7cjysal_firmware"},{"vendor":"intel","product":"nuc_7_home_a_mini_pc_nuc7i3bnhxf_firmware"},{"vendor":"intel","product":"nuc_7_home_a_mini_pc_nuc7i5bnhxf_firmware"},{"vendor":"intel","product":"nuc_7_home_a_mini_pc_nuc7i5bnkp_firmware"},{"vendor":"intel","product":"nuc_8_business_pc_nuc8i7hnkqc_firmware"},{"vendor":"intel","product":"nuc_8_enthusiast_pc_nuc8i7bekqa_firmware"},{"vendor":"intel","product":"nuc_8_home_pc_nuc8i3cysm_firmware"},{"vendor":"intel","product":"nuc_8_mainstream-g_kit_nuc8i5inh_firmware"},{"vendor":"intel","product":"nuc_8_mainstream-g_kit_nuc8i7inh_firmware"},{"vendor":"intel","product":"nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware"},{"vendor":"intel","product":"nuc_8_rugged_kit_nuc8cchkr_firmware"},{"vendor":"intel","product":"nuc_board_d34010wyb_firmware"},{"vendor":"intel","product":"nuc_board_d54250wyb_firmware"},{"vendor":"intel","product":"nuc_board_de3815tybe_firmware"},{"vendor":"intel","product":"nuc_board_nuc5i3mybe_firmware"},{"vendor":"intel","product":"nuc_board_nuc5i5mybe_firmware"},{"vendor":"intel","product":"nuc_board_nuc7i3dnbe_firmware"},{"vendor":"intel","product":"nuc_board_nuc7i5dnbe_firmware"},{"vendor":"intel","product":"nuc_board_nuc7i7dnbe_firmware"},{"vendor":"intel","product":"nuc_board_nuc8cchb_firmware"},{"vendor":"intel","product":"nuc_kit_d34010wyk_firmware"},{"vendor":"intel","product":"nuc_kit_d34010wykh_firmware"},{"vendor":"intel","product":"nuc_kit_d54250wyk_firmware"},{"vendor":"intel","product":"nuc_kit_d54250wykh_firmware"},{"vendor":"intel","product":"nuc_kit_de3815tykhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5cpyh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i3myhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i3ryh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i3ryhs_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i3ryhsn_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i3ryk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i5myhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i5ryh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i5ryhs_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i5ryk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5i7ryh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5pgyh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc5ppyh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6cayh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6cays_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6i3syh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6i3syk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6i5syh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6i5syk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc6i7kyk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7cjyh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i3bnh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i3bnhx1_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i3bnk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i3dnhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i3dnke_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i5bnh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i5bnhx1_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i5bnk_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i5dnhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i5dnke_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i7bnh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i7bnhx1_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i7dnhe_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7i7dnke_firmware"},{"vendor":"intel","product":"nuc_kit_nuc7pjyh_firmware"},{"vendor":"intel","product":"nuc_kit_nuc8i7bek_firmware"},{"vendor":"intel","product":"nuc_kit_nuc8i7hnk_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0526"},{"url":"https://github.com/advisories/GHSA-q895-6jw5-rqjr"}],"sources":{"cve":[{"id":"CVE-2020-0526","description":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","status":"published","published":"2020-03-12T20:02:31Z","modified":"2024-08-04T06:02:52.333Z","updated_at":"2026-11-02T14:36:00.280422Z"}],"euvd":[{"id":"EUVD-2020-2024","description":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","status":"published","published":"2020-03-12T20:02:31Z","modified":"2024-08-04T06:02:52Z","updated_at":"2026-11-03T03:08:19.671968Z"}],"ghsa":[{"id":"GHSA-q895-6jw5-rqjr","title":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially...","description":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","status":"published","published":"2022-05-24T17:10:52Z","modified":"2023-01-29T05:01:40Z","updated_at":"2026-11-02T14:44:53.095202Z"}],"nvd":[{"id":"CVE-2020-0526","description":"Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html","status":"published","published":"2020-03-12T21:15:13.937Z","modified":"2026-06-17T02:45:58.913Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:55.32877Z"}]}}