CVE-2019-14609

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
intelnuc_8_mainstream_game_kit_firmware
𝑥
< 0036
intelnuc_8_mainstream_game_mini_computer_firmware
𝑥
< 0036
intelnuc8i7bek_firmware
𝑥
< 0077
intelcd1p64gk_firmware
𝑥
< 0053
intelnuc8i3cysm_firmware
𝑥
< 0043
intelnuc8i7hnk_firmware
𝑥
< 0059
intelnuc7i7dnke_firmware
𝑥
< 0067
intelnuc7i5dnke_firmware
𝑥
< 0067
intelnuc7i3dnhe_firmware
𝑥
< 0067
intelstk2mv64cc_firmware
𝑥
< 0061
intelstk2m3w64cc_firmware
𝑥
< 0062
intelnuc6i7kyk_firmware
𝑥
< 0066
intelnuc6i5syh_firmware
𝑥
< 0072
intelnuc7cjyh_firmware
𝑥
< 0053
intelcd1m3128mk_firmware
𝑥
< 0058
intelcd1iv128mk_firmware
𝑥
< 0038
intelnuc6cays_firmware
𝑥
< 0064
intelde3815tybe_firmware
𝑥
< 0024
inteld34010wyb_firmware
𝑥
< 0054
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html