Nuc Kit Firmware
CVE-2019-11128
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
AnalysisAI
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-20. Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. Affected products include: Intel Nuc Kit Firmware, Intel Compute Card Firmware, Intel Compute Stick Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Nuc Kit Firmware
View allImproper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary co
Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially en
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable es
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of
Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl
Same weakness CWE-20 – Improper Input Validation
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today