CVE-2019-11094

Published: May 17, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

Affected (1)

Products: Intel: Nuc Kit Firmware

Intel

1 product

Nuc Kit Firmware

Configuration A

1 vulnerable · 19 platform

Vulnerable Software	Affected Versions
Intel Nuc Kit Firmware	All versions

Running on/with	Platform Versions
Intel Nuc Kit D33217gke	All versions
Intel Nuc Kit D53427rke	All versions
Intel Nuc Kit D54250wyb	All versions
Intel Nuc Kit De3815tybe	All versions
Intel Nuc Kit Dn2820fykh	All versions
Intel Nuc Kit Nuc5cpyh	All versions
Intel Nuc Kit Nuc5i3myhe	All versions
Intel Nuc Kit Nuc5i5myhe	All versions
Intel Nuc Kit Nuc5i7ryh	All versions
Intel Nuc Kit Nuc5pgyh	All versions
Intel Nuc Kit Nuc6cays	All versions
Intel Nuc Kit Nuc6i5syh	All versions
Intel Nuc Kit Nuc6i7kyk	All versions
Intel Nuc Kit Nuc7cjyh	All versions
Intel Nuc Kit Nuc7i3dnhe	All versions
Intel Nuc Kit Nuc7i5dnke	All versions
Intel Nuc Kit Nuc7i7bnh	All versions
Intel Nuc Kit Nuc7i7dnke	All versions
Intel Nuc Kit Nuc8i7hnk	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00251.html

Source: secure@intel.com

Not Applicable

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00251.html

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

Timeline

No history available yet.