What’s Vulnerable › Vulnerabilities

CVE-2020-8742

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-13 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Cd1C32Gk Firmware: before gkaplcpx.86a — fixed in gkaplcpx.86a
• Intel Cd1C64Gk Firmware: before gkaplcpx.86a — fixed in gkaplcpx.86a
• Intel Cd1P64Gk Firmware: before gkaplcpx.86a — fixed in gkaplcpx.86a
• Intel De3815Tybe Firmware: before tybyt20h.86a; before tybyt10h.86a — fixed in tybyt10h.86a, tybyt20h.86a
• Intel De3815Tykhe Firmware: before tybyt20h.86a; before tybyt10h.86a — fixed in tybyt10h.86a, tybyt20h.86a
• Intel Nuc5Cpyh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I3Mybe Firmware: before mybdwi5v.86a — fixed in mybdwi5v.86a
• Intel Nuc5I3Myhe Firmware: before mybdwi5v.86a — fixed in mybdwi5v.86a
• Intel Nuc5I3Ryh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I3Ryhs Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I3Ryhsn Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I3Ryk Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I5Mybe Firmware: before mybdwi5v.86a — fixed in mybdwi5v.86a
• Intel Nuc5I5Myhe Firmware: before mybdwi5v.86a — fixed in mybdwi5v.86a
• Intel Nuc5I5Ryh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I5Ryhs Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I5Ryk Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5I7Ryh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5Pgyh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc5Ppyh Firmware: before pybswcel.86a — fixed in pybswcel.86a
• Intel Nuc6Cayh Firmware: before ayaplcel.86a — fixed in ayaplcel.86a
• Intel Nuc6Cays Firmware: before ayaplcel.86a — fixed in ayaplcel.86a
• Intel Nuc6I7Kyk Firmware: before kyskli70.86a — fixed in kyskli70.86a
• Intel Nuc7Cjyh Firmware: before jyglkcpx.86a — fixed in jyglkcpx.86a
• Intel Nuc7Cjysal Firmware: before jyglkcpx.86a — fixed in jyglkcpx.86a
• Intel Nuc7I3Bnb Firmware: before bnkbl357.86a — fixed in bnkbl357.86a
• Intel Nuc7I3Bnh Firmware: before bnkbl357.86a — fixed in bnkbl357.86a
• Intel Nuc7I3Bnhx1 Firmware: before bnkbl357.86a — fixed in bnkbl357.86a
• Intel Nuc7I3Bnhxf Firmware: before bnkbl357.86a — fixed in bnkbl357.86a
• Intel Nuc7I3Bnk Firmware: before bnkbl357.86a — fixed in bnkbl357.86a

How to fix

Upgrade to a fixed version: Intel Cd1C32Gk Firmware gkaplcpx.86a; Intel Cd1C64Gk Firmware gkaplcpx.86a; Intel Cd1P64Gk Firmware gkaplcpx.86a; Intel De3815Tybe Firmware tybyt10h.86a, tybyt20h.86a; Intel De3815Tykhe Firmware tybyt10h.86a, tybyt20h.86a; Intel Nuc5Cpyh Firmware pybswcel.86a; Intel Nuc5I3Mybe Firmware mybdwi5v.86a; Intel Nuc5I3Myhe Firmware mybdwi5v.86a; Intel Nuc5I3Ryh Firmware pybswcel.86a; Intel Nuc5I3Ryhs Firmware pybswcel.86a; Intel Nuc5I3Ryhsn Firmware pybswcel.86a; Intel Nuc5I3Ryk Firmware pybswcel.86a. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html

Get alerted when CVE-2020-8742 or the next vulnerability affects your stack