CVE-2020-8685

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	Intel (R) LED Manager for NUC Advisory	Before version 1.2.3

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00376.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00376.htmlPatch, Vendor Advisory

Timeline

Published: Aug 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-86877.8Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7.CVE-2020-86887.5Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of CVE-2020-86896.5Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially en CVE-2020-86906.7Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enabl CVE-2020-86916.7A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation o CVE-2020-86926.7Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user t CVE-2020-86936.7Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enab CVE-2020-86945.5Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable in CVE-2020-86955.5Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disc CVE-2020-86965.5Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentia CVE-2020-86985.5Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos CVE-2020-87006.7Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privi