CVE-2019-14610

Published: Dec 16, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (19)

Products: Intel: Nuc 8 Mainstream Game Kit Firmware, Nuc 8 Mainstream Game Mini Computer Firmware, Nuc8i7bek Firmware, Cd1p64gk Firmware, Nuc8i3cysm Firmware, Nuc8i7hnk Firmware, Nuc7i7dnke Firmware, Nuc7i5dnke Firmware, Nuc7i3dnhe Firmware, Stk2mv64cc Firmware, Stk2m3w64cc Firmware, Nuc6i7kyk Firmware, Nuc6i5syh Firmware, Nuc7cjyh Firmware, Cd1m3128mk Firmware, Cd1iv128mk Firmware, Nuc6cays Firmware, De3815tybe Firmware, D34010wyb Firmware

Intel

19 products

Nuc 8 Mainstream Game Kit Firmware

Nuc 8 Mainstream Game Mini Computer Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream Game Kit Firmware	Before 0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream Game Kit	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 8 Mainstream Game Mini Computer Firmware	Before 0036

Running on/with	Platform Versions
Intel Nuc 8 Mainstream Game Mini Computer	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7bek Firmware	Before 0077

Running on/with	Platform Versions
Intel Nuc8i7bek	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1p64gk Firmware	Before 0053

Running on/with	Platform Versions
Intel Cd1p64gk	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3cysm Firmware	Before 0043

Running on/with	Platform Versions
Intel Nuc8i3cysm	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i7hnk Firmware	Before 0059

Running on/with	Platform Versions
Intel Nuc8i7hnk	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i7dnke Firmware	Before 0067

Running on/with	Platform Versions
Intel Nuc7i7dnke	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i5dnke Firmware	Before 0067

Running on/with	Platform Versions
Intel Nuc7i5dnke	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7i3dnhe Firmware	Before 0067

Running on/with	Platform Versions
Intel Nuc7i3dnhe	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Stk2mv64cc Firmware	Before 0061

Running on/with	Platform Versions
Intel Stk2mv64cc	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Stk2m3w64cc Firmware	Before 0062

Running on/with	Platform Versions
Intel Stk2m3w64cc	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6i7kyk Firmware	Before 0066

Running on/with	Platform Versions
Intel Nuc6i7kyk	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6i5syh Firmware	Before 0072

Running on/with	Platform Versions
Intel Nuc6i5syh	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc7cjyh Firmware	Before 0053

Running on/with	Platform Versions
Intel Nuc7cjyh	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1m3128mk Firmware	Before 0058

Running on/with	Platform Versions
Intel Cd1m3128mk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cd1iv128mk Firmware	Before 0038

Running on/with	Platform Versions
Intel Cd1iv128mk	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc6cays Firmware	Before 0064

Running on/with	Platform Versions
Intel Nuc6cays	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel De3815tybe Firmware	Before 0024

Running on/with	Platform Versions
Intel De3815tybe	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel D34010wyb Firmware	Before 0054

Running on/with	Platform Versions
Intel D34010wyb	All versions

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.