Skip to main content

Nuc Kit Firmware CVE-2019-11094

HIGH
Improper Input Validation (CWE-20)
2019-05-17 secure@intel.com
Privilege Escalation Denial Of Service Intel Information Disclosure Nuc Kit Firmware
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 17, 2019 - 16:29 nvd
HIGH 7.8

DescriptionNVD

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

AnalysisAI

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access. Affected products include: Intel Nuc Kit Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc Kit Firmware

View all
CVE-2018-12176 HIGH
8.2 Sep 12

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary co
CVE-2019-11140 MEDIUM
6.7 Aug 19

Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable es
CVE-2019-11129 MEDIUM
6.7 Jun 13

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
CVE-2019-11128 MEDIUM
6.7 Jun 13

Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable

CVE-2019-11127 MEDIUM
6.7 Jun 13

Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of

CVE-2019-11126 MEDIUM
6.7 Jun 13

Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation

CVE-2019-11125 MEDIUM
6.7 Jun 13

Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable

CVE-2019-11124 MEDIUM
6.7 Jun 13

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
CVE-2019-11123 MEDIUM
6.7 Jun 13

Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2019-11094 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy