Nuc Kit Firmware
CVE-2019-11124
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
AnalysisAI
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Technical ContextAI
This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. Affected products include: Intel Nuc Kit Firmware, Intel Compute Card Firmware, Intel Compute Stick Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.
More in Nuc Kit Firmware
View allImproper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary co
Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially en
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable es
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable
Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of
Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today