Vulnerabilities > CVE-2019-11124 - Out-of-bounds Write vulnerability in Intel products

CVSS 6.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

intel

CWE-787

NVD

Published: 2019-06-13

Updated: 2019-06-24

Summary

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Vulnerable Configurations

Part	Description	Count
OS	Intel Intel NUC KIT Firmware - Intel Compute Card Firmware - Intel Compute Stick Firmware -	3
Hardware	Intel Intel NUC KIT Nuc8I3Bex - Intel NUC KIT Nuc8I3Bex Nuc_Kit_D34010Wyx Intel NUC KIT Nuc8I3Bex Nuc_Kit_D54250Wyx Intel NUC KIT Nuc8I3Bex Nuc_Kit_De3815Tyb Intel NUC KIT Nuc8I3Bex Nuc_Kit_Dn2820Fykh Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5Cpyh Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5I3Myx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5I3Ryx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5I5Myx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5I5Ryx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5I7Ryx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5Pgyh Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc5Ppyh Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc6Cayx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc6I3Syx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc6I5Syx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc6I7Kyk Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7Cjy Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I3Bnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I3Dnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I5Bnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I5Dnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I7Bnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7I7Dnx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc7Pjy Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc8I3Cyx Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc8I5Bex Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc8I7Bex Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc8I7Hnk Intel NUC KIT Nuc8I3Bex Nuc_Kit_Nuc8I7Hvk Intel Compute Card Cd1C64Gk - Intel Compute Card Cd1Iv128Mk - Intel Compute Card Cd1M3128Mk - Intel Compute Card Cd1P64Gk - Intel Compute Stick Stck1A32Wfc - Intel Compute Stick Stck1A8Lfc - Intel Compute Stick Stk2M364Cc - Intel Compute Stick Stk2M3W64Cc - Intel Compute Stick Stk2Mv64Cc -	39

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References