The vulnerability of the built-in software in Intel NUC Kits is related to buffer overflows in memory, which allows attackers to access protected information, cause system failures, or gain increased privileges.

🗓️ 21 Jun 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Intel NUC software has a memory buffer overflow that exposes data, causes failures, or elevates privileges.

Reporter	Title	Published	Views	Family All 9
CNVD	Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2019-42732)	14 Jun 201900:00	–	cnvd
CVE	CVE-2019-11127	13 Jun 201915:36	–	cve
Cvelist	CVE-2019-11127	13 Jun 201915:36	–	cvelist
EUVD	EUVD-2019-2831	7 Oct 202500:30	–	euvd
Intel	Intel® NUC Firmware Advisory	11 Jun 201900:00	–	intel
NVD	CVE-2019-11127	13 Jun 201916:29	–	nvd
Prion	Buffer overflow	13 Jun 201916:29	–	prion
RedhatCVE	CVE-2019-11127	22 May 202507:52	–	redhatcve
ThreatPost	Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure	12 Jun 201913:25	–	threatpost

Vulners

Node

intel intel_nuc_kit_nuc8i7hnkRange<0054

OR

intel intel_nuc_kit_nuc8i7hvkRange<0054

OR

intel intel_nuc_kit_nuc8i3bexRange<0071

OR

intel intel_nuc_kit_nuc8i5bexRange<0071

OR

intel intel_nuc_kit_nuc8i7bexRange<0071

OR

intel intel_compute_card_cd1c64gkRange<0050

OR

intel intel_compute_card_cd1p64gkRange<0050

OR

intel intel_nuc_kit_nuc8i3cyxRange<0040

OR

intel intel_nuc_kit_nuc7i3dnxRange<0063

OR

intel intel_nuc_kit_nuc7i5dnxRange<0063

OR

intel intel_nuc_kit_nuc7i7dnxRange<0063

OR

intel intel_compute_stick_stk2m3w64ccRange<0060

OR

intel intel_compute_stick_stk2m364ccRange<0060

OR

intel intel_compute_stick_stk2mv64ccRange<0060

OR

intel intel_nuc_kit_nuc6i7kykRange<0062

OR

intel intel_nuc_kit_nuc7pjyRange<0049

OR

intel intel_nuc_kit_nuc7cjyRange<0049

OR

intel intel_nuc_kitnuc6cayxRange<0060

OR

intel intel_nuc_kit_de3815tyb_(bios_id_code_tybyt20h.86a)Range<0020

OR

intel intel_nuc_kit_de3815tyb_(bios_id_code_tybyt10h.86a)Range<0065

OR

intel intel_nuc_kit_nuc5cpyhRange<0076

OR

intel intel_nuc_kit_nuc5pgyhRange<0076

OR

intel intel_nuc_kit_nuc5ppyhRange<0076

OR

intel intel_nuc_kit_nuc5i3ryxRange<0379

OR

intel intel_nuc_kit_nuc5i5ryxRange<0379

OR

intel intel_nuc_kit_nuc5i7ryxRange<0379

OR

intel intel_nuc_kit_d34010wyxRange<0051

OR

intel intel_nuc_kit_d54250wyxRange<0051

OR

intel intel_nuc_kit_nuc6i3syxRange<0070

OR

intel intel_nuc_kit_nuc6i5syxRange<0070

OR

intel intel_nuc_kit_nuc7i3bnxRange<0079

OR

intel intel_nuc_kit_nuc7i5bnxRange<0079

OR

intel intel_nuc_kit_nuc7i7bnxRange<0079

OR

intel intel_compute_card_cd1iv128mkRange<0036

OR

intel intel_compute_card_cd1m3128mkRange<0056

OR

intel intel_compute_stick_stck1a8lfcRange<0039

OR

intel intel_compute_stick_stck1a32wfcRange<0039

OR

intel intel_nuc_kit_dn2820fykhRange<0067

OR

intel intel_nuc_kit_nuc5i5myxRange<0051

OR

intel intel_nuc_kit_nuc5i3myxRange<0054

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.8

CVSS 38.2

EPSS0.00424

Intel kit memory buffer overflow data exposure system failure privilege escalation