Lucene search

[email protected]CVE-2019-14570

HistoryOct 11, 2019 - 6:15 p.m.

CVE-2019-14570

2019-10-1118:15:11

CWE-787

[email protected]

web.nvd.nist.gov

cve-2019-14570

memory corruption

intel(r) nuc

system firmware

privilege escalation

denial of service

information disclosure

local access

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Memory corruption in system firmware for Intel® NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected configurations

NVD

Node

intelnuc_8_mainstream_game_kit_firmwareRange<inwhl357

AND

intelnuc_8_mainstream_game_kitMatch-

Node

intelnuc_8_mainstream_game_mini_computer_firmwareRange<inwhl357

AND

intelnuc_8_mainstream_game_mini_computerMatch-

Node

intelnuc_board_de3815tybe_firmwareRange<ty0022

AND

intelnuc_board_de3815tybeMatch-

Node

intelnuc_kit_de3815tykhe_firmwareRange<ty0022

AND

intelnuc_kit_de3815tykheMatch-

Node

intelnuc_board_de3815tybe_firmwareRange<ty0067

AND

intelnuc_board_de3815tybeMatch-

Node

intelnuc_kit_de3815tykhe_firmwareRange<ty0067

AND

intelnuc_kit_de3815tykheMatch-

Node

intelnuc_kit_dn2820fykh_firmwareRange<fy0069

AND

intelnuc_kit_dn2820fykhMatch-

CPENameOperatorVersion
intel:nuc_8_mainstream_game_kit_firmwareintel nuc 8 mainstream game kit firmwareltinwhl357

CPE	Name	Operator	Version
intel:nuc_8_mainstream_game_kit_firmware	intel nuc 8 mainstream game kit firmware	lt	inwhl357

CNA Affected

[
  {
    "product": "NUC Advisory",
    "vendor": "Intel®",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00296.html

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2019-14570

prion1 cvelist1 nvd1 intel1 threatpost1