Intel® NUC® Firmware Advisory

🗓️ 10 Dec 2019 00:00:00Reported by Intel Security CenterType

Intel NUC firmware may allow privilege escalation via multiple vulnerabilities. Firmware updates released to mitigate risks for affected products

Reporter	Title	Published	Views	Family All 50
BDU FSTEC	The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards lies in the ability to write beyond the buffer boundaries of memory, allowing attackers to exploit their privileges.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is caused by a full integer overflow, allowing an attacker to exploit their privileges.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is related to lack of access control, allowing attackers to increase their privileges.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards exists due to insufficient testing of input data. This allows attackers to exploit it to gain increased privileges.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards arises from the execution of operations outside the buffer in memory, allowing attackers to exploit their privileges.	20 Mar 202000:00	–	bdu_fstec
Circl	CVE-2019-14608	12 Mar 202412:16	–	circl
Circl	CVE-2019-14609	12 Mar 202412:16	–	circl
Circl	CVE-2019-14610	12 Mar 202412:16	–	circl
Circl	CVE-2019-14611	12 Mar 202412:46	–	circl
Circl	CVE-2019-14612	12 Mar 202412:46	–	circl

10 Dec 2019 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.8

EPSS0.00337