CVE-2019-14569

CWE-119 — Buffer Overflow3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 83.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel NUC 8 Mainstream Game KIT Firmware Intel NUC 8 Mainstream Game Mini Computer Firmware Intel NUC Board De3815tybe Firmware +3 more

Timeline

PublishedOct 11

Latest updateMay 24

Description

Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDintel/nuc_kit_dn2820fykh_firmware< fy0069

▶NVDintel/nuc_kit_de3815tykhe_firmware< ty0022+1

▶NVDintel/nuc_board_de3815tybe_firmware< ty0022+1

▶NVDintel/nuc_8_mainstream_game_kit_firmware< inwhl357

▶NVDintel/nuc_8_mainstream_game_mini_computer_firmware< inwhl357

🔴Vulnerability Details

GHSA

GHSA-vvw3-8vmr-9j5v: Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service an↗2022-05-24

▶

CVEList

CVE-2019-14569: Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service an↗2019-10-11

▶