CVE-2019-14610 : Improper access control in firmware for Intel(R) NUC(R) may allow an authenticat

Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Published 2019-12-16 20:15:15

Updated 2020-01-02 16:56:04

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2019-14610

Intel » Nuc 8 Mainstream Game Kit Firmware
Versions before (<) 0036
cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream Game Kit » Version: N/A
Intel » Nuc 8 Mainstream Game Mini Computer Firmware
Versions before (<) 0036
cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Mainstream Game Mini Computer » Version: N/A
Intel » Nuc8i7bek Firmware
Versions before (<) 0077
cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc8i7bek » Version: N/A
Intel » Cd1p64gk Firmware
Versions before (<) 0053
cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Cd1p64gk » Version: N/A
Intel » Nuc8i3cysm Firmware
Versions before (<) 0043
cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc8i3cysm » Version: N/A
Intel » Nuc8i7hnk Firmware
Versions before (<) 0059
cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc8i7hnk » Version: N/A
Intel » Nuc7i7dnke Firmware
Versions before (<) 0067
cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i7dnke » Version: N/A
Intel » Nuc7i5dnke Firmware
Versions before (<) 0067
cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i5dnke » Version: N/A
Intel » Nuc7i3dnhe Firmware
Versions before (<) 0067
cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7i3dnhe » Version: N/A
Intel » Stk2mv64cc Firmware
Versions before (<) 0061
cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Stk2mv64cc » Version: N/A
Intel » Stk2m3w64cc Firmware
Versions before (<) 0062
cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Stk2m3w64cc » Version: N/A
Intel » Nuc6i7kyk Firmware
Versions before (<) 0066
cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc6i7kyk » Version: N/A
Intel » Nuc6i5syh Firmware
Versions before (<) 0072
cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc6i5syh » Version: N/A
Intel » Nuc7cjyh Firmware
Versions before (<) 0053
cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc7cjyh » Version: N/A
Intel » Cd1m3128mk Firmware
Versions before (<) 0058
cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Cd1m3128mk » Version: N/A
Intel » Cd1iv128mk Firmware
Versions before (<) 0038
cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Cd1iv128mk » Version: N/A
Intel » Nuc6cays Firmware
Versions before (<) 0064
cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc6cays » Version: N/A
Intel » De3815tybe Firmware
Versions before (<) 0024
cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » De3815tybe » Version: N/A
Intel » D34010wyb Firmware
Versions before (<) 0054
cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » D34010wyb » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-14610

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-14610

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2019-14610

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html

INTEL-SA-00323
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-14610

Products affected by CVE-2019-14610

Exploit prediction scoring system (EPSS) score for CVE-2019-14610

CVSS scores for CVE-2019-14610

References for CVE-2019-14610