CVE-2019-14609

CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.7MEDIUM

EPSS

0.1%

top 64.41%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Cd1iv128mk Firmware Intel Cd1m3128mk Firmware Intel Cd1p64gk Firmware +16 more

Timeline

PublishedDec 16

Latest updateMay 24

Description

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages20 packages

▶NVDintel/cd1p64gk_firmware< 0053

▶NVDintel/nuc6cays_firmware< 0064

▶NVDintel/nuc7cjyh_firmware< 0053

▶NVDintel/d34010wyb_firmware< 0054

▶NVDintel/nuc6i5syh_firmware< 0072

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-r2vc-f934-3977: Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access↗2022-05-24

▶

CVEList

CVE-2019-14609: Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access↗2019-12-16

▶