CVE-2019-11124

Out of bound read/write in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11124

Intel NUC firmware advisory documents CVE-2019-11123, CVE-2019-11124, CVE-2019-11125, CVE-2019-11126, CVE-2019-11127, CVE-2019-11128, and CVE-2019-11129 describing systemic firmware flaws that may allow a privileged user to escalate privileges, cause DoS, or disclose information via local access....

CVE-2019-11127

CVE-2019-11127 is a buffer overflow in Intel NUC Kit system firmware that could allow a locally privileged user to escalate privileges, cause DoS, or disclose information. Intel’s Intel‑SA‑00264 advisory documents related CVEs (11123, 11124, 11125, 11126, 11127, 11128, 11129) and specifies that m...

CVE-2019-11125

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11125

The CVE-2019-11125 family concerns Intel NUC Kit system firmware with multiple local-rights escalation issues. Concrete entries in linked documents (Intel INTEL‑SA‑00264 advisory) enumerate seven CVEs affecting NUC Kit and Compute Card firmware: CVE-2019-11123: Insufficient session validation in ...

CVE-2019-11123

CVE-2019-11123 affects Intel NUC Kit/system firmware (e.g., NUC8i3BEx, NUC8i5BEx, NUC8i7BEx, several Compute Cards/NUCs). Root cause: insufficient session validation in the system firmware, enabling a local privileged user to potentially escalate privileges, cause DoS, or disclose information. CV...

CVE-2019-11126

Intel NUC firmware CVE-2019-11126 is a pointer-corruption vulnerability in the system firmware that may allow a local privileged user to escalate privileges, cause DoS, or disclose information. Intel’s advisory (Intel-SA-00264) lists affected devices (various NUC Kit and Compute Card models) and ...

CVE-2019-11128

The CVE-2019-11128 entry affects Intel® NUC firmware. Root cause: insufficient input validation in system firmware for Intel NUC Kit. Impact: escalation of privilege, denial of service, and/or information disclosure via local access (local attack vector). Intel advisory lists CVSS v3.0 base score...

CVE-2019-11127

Buffer overflow in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11128

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11129

CVE-2019-11129 affects Intel NUC Kit system firmware. Out-of-bounds read/write in firmware may enable a local privileged escalation, DoS, or information disclosure. Intel’s advisory Intel-SA-00264 lists affected NUC models and requires firmware updates (BIOS versions 0071+ for NUC8 series and oth...

Intel NUC Kit Input Validation Error Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. An input validation error vulnerability exists in the system firmware in the Intel NUC Kit, which arises from a program's failure to adequately validate a session and can be exploited by a local attacker to elevate...

Intel NUC Kit Buffer Overflow Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer overflow vulnerability exists in the system firmware in the Intel NUC Kit, which originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting ...

Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure

Intel has patched seven high-severity vulnerabilities in the system firmware of its Intel NUC short for Next Unit of Computing, a mini-PC kit used for gaming, digital signage and more. Overall, the chip-maker patched 25 vulnerabilities across various platforms this week – including eight...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11123...

Vulnerability in the built-in software of the Intel NUC Kit, related to insufficient verification of input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability in the built-in software of the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

Intel NUC Kit Input Validation Error Vulnerability (CNVD-2019-42729)

The Intel R NUC Kit is a mini host from Intel. An input validation error vulnerability exists in the system firmware in the Intel R NUC Kit. The vulnerability originates from a network system or product that does not properly validate input data. An attacker could exploit this vulnerability to ga...

Intel Fixes Critical, High-Severity Flaws Across Several Products

Intel has issued an updated advisory for more than 30 fixes addressing vulnerabilities across various products – including a critical flaw in Intel’s converged security and management engine CSME that could enable privilege-escalation. The bug CVE-2019-0153 exists in a subsystem of Intel CSME,...

CVE-2019-11094

Insufficient input validation in system firmware for Intel R NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...

Input validation

Insufficient input validation in system firmware for Intel R NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...