CVE-2019-11094

2019-05-1715:41:37

intel

www.cve.org

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Insufficient input validation in system firmware for Intel ® NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

CNA Affected

[
  {
    "product": "Intel (R) NUC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Kit NUC8i7HNK BIOS and Kit NUC8i7HVK BIOS before version 0054. Kit NUC7i7DNHE BIOS, Kit NUC7i7DNKE BIOS, Kit NUC7i5DNHE, Kit NUC7i5DNHE and Board NUC7i7DNBE BIOS before version 0062."
      }
    ]
  }
]