← Back

CVE-2019-11140

nvd nist
Published: Aug 19, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected (3)

Intel
3 products
Nuc Kit Firmware
Compute Stick Firmware
Compute Card Firmware
Configuration A
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Nuc Kit Firmware
All versions
Running on/withPlatform Versions
Intel
Nuc Kit Nuc7i3dnx
All versions
Intel
Nuc Kit Nuc7i5dnx
All versions
Intel
Nuc Kit Nuc7i7dnx
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Compute Stick Firmware
All versions
Running on/withPlatform Versions
Intel
Compute Stick Stk2mv64cc
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Compute Card Firmware
All versions
Running on/withPlatform Versions
Intel
Compute Card Cd1iv128mk
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.