CVE-2019-11128: Input Validation

Published Jun 13, 2019

Updated

Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected Software

42 affected components

Intel Nuc Kit Firmware

Intel Nuc Kit Nuc8i3bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_d34010wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_d54250wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_de3815tyb

Intel Nuc Kit Nuc8i3bex=nuc_kit_dn2820fykh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5cpyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i7ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5pgyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5ppyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6cayx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i3syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i5syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i7kyk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7cjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7pjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i3cyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i5bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hnk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hvk

Intel Compute Card Firmware

Intel Compute Card Cd1c64gk

Intel Compute Card Cd1iv128mk

Intel Compute Card Cd1m3128mk

Intel Compute Card Cd1p64gk

Intel Compute Stick Firmware

Intel Compute Stick Stck1a32wfc

Intel Compute Stick Stck1a8lfc

Intel Compute Stick Stk2m364cc

Intel Compute Stick Stk2m3w64cc

Intel Compute Stick Stk2mv64cc

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html?wapkw=2019-11129

Event History

Jun 13, 2019

CVE Published

via MITRE·03:36 PM

Data Sourced

via MITRE·03:36 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-11128?

CVE-2019-11128 has a severity of medium with a severity value of 6.7.

How does CVE-2019-11128 impact Intel(R) NUC Kit?

CVE-2019-11128 may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access on Intel(R) NUC Kit.

What software is affected by CVE-2019-11128?

The affected software includes Intel NUC Kit Firmware and Intel Compute Card Firmware.

How can I fix CVE-2019-11128?

To fix CVE-2019-11128, users should refer to the advisories provided by Intel and apply any available patches or updates.

Where can I find more information about CVE-2019-11128?

More information about CVE-2019-11128 can be found in the security advisories provided by Intel.