CVE-2019-11094 : Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially en

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

Published 2019-05-17 16:29:03

Updated 2019-05-21 14:35:11

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Input validationDenial of serviceInformation leak

Exploit prediction scoring system (EPSS) score for CVE-2019-11094

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-11094

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-11094

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2019-11094

Intel » Nuc Kit Firmware » Version: N/A
cpe:2.3:o:intel:nuc_kit_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc Kit D33217gke » Version: N/A
When used together with: Intel » Nuc Kit D53427rke » Version: N/A
When used together with: Intel » Nuc Kit D54250wyb » Version: N/A
When used together with: Intel » Nuc Kit De3815tybe » Version: N/A
When used together with: Intel » Nuc Kit Dn2820fykh » Version: N/A
When used together with: Intel » Nuc Kit Nuc5cpyh » Version: N/A
When used together with: Intel » Nuc Kit Nuc5i3myhe » Version: N/A
When used together with: Intel » Nuc Kit Nuc5i5myhe » Version: N/A
When used together with: Intel » Nuc Kit Nuc5i7ryh » Version: N/A
When used together with: Intel » Nuc Kit Nuc5pgyh » Version: N/A
When used together with: Intel » Nuc Kit Nuc6cays » Version: N/A
When used together with: Intel » Nuc Kit Nuc6i5syh » Version: N/A
When used together with: Intel » Nuc Kit Nuc6i7kyk » Version: N/A
When used together with: Intel » Nuc Kit Nuc7cjyh » Version: N/A
When used together with: Intel » Nuc Kit Nuc7i3dnhe » Version: N/A
When used together with: Intel » Nuc Kit Nuc7i5dnke » Version: N/A
When used together with: Intel » Nuc Kit Nuc7i7bnh » Version: N/A
When used together with: Intel » Nuc Kit Nuc7i7dnke » Version: N/A
When used together with: Intel » Nuc Kit Nuc8i7hnk » Version: N/A

Vulnerability Details : CVE-2019-11094

Exploit prediction scoring system (EPSS) score for CVE-2019-11094

CVSS scores for CVE-2019-11094

CWE ids for CVE-2019-11094

References for CVE-2019-11094

Products affected by CVE-2019-11094