CVE-2019-14570

CWE-787 — Out-of-bounds Write3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 80.28%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel NUC 8 Mainstream Game KIT Firmware Intel NUC 8 Mainstream Game Mini Computer Firmware Intel NUC Board De3815tybe Firmware +3 more

Timeline

PublishedOct 11

Latest updateMay 24

Description

Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDintel/nuc_kit_dn2820fykh_firmware< fy0069

▶NVDintel/nuc_kit_de3815tykhe_firmware< ty0022+1

▶NVDintel/nuc_board_de3815tybe_firmware< ty0022+1

▶NVDintel/nuc_8_mainstream_game_kit_firmware< inwhl357

▶NVDintel/nuc_8_mainstream_game_mini_computer_firmware< inwhl357

🔴Vulnerability Details

GHSA

GHSA-w697-crqq-q58c: Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and↗2022-05-24

▶

CVEList

CVE-2019-14570: Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and↗2019-10-11

▶