CVE-2019-14610

published 2019-12-16

CVE-2019-14610: Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
intel	cd1iv128mk_firmware	< 0038	0038
intel	cd1m3128mk_firmware	< 0058	0058
intel	cd1p64gk_firmware	< 0053	0053
intel	d34010wyb_firmware	< 0054	0054
intel	de3815tybe_firmware	< 0024	0024
intel	nuc6cays_firmware	< 0064	0064
intel	nuc6i5syh_firmware	< 0072	0072
intel	nuc6i7kyk_firmware	< 0066	0066
intel	nuc7cjyh_firmware	< 0053	0053
intel	nuc7i3dnhe_firmware	< 0067	0067
intel	nuc7i5dnke_firmware	< 0067	0067
intel	nuc7i7dnke_firmware	< 0067	0067
intel	nuc8i3cysm_firmware	< 0043	0043
intel	nuc8i7bek_firmware	< 0077	0077
intel	nuc8i7hnk_firmware	< 0059	0059
intel	nuc_8_mainstream_game_kit_firmware	< 0036	0036
intel	nuc_8_mainstream_game_mini_computer_firmware	< 0036	0036
intel	stk2m3w64cc_firmware	< 0062	0062
intel	stk2mv64cc_firmware	< 0061	0061