CVE-2019-11129: Medium severity intel nuc kit firmware vulnerability

Published Jun 13, 2019

Updated

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected Software

42 affected components

Intel Nuc Kit Firmware

Intel Nuc Kit Nuc8i3bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_d34010wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_d54250wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_de3815tyb

Intel Nuc Kit Nuc8i3bex=nuc_kit_dn2820fykh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5cpyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i7ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5pgyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5ppyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6cayx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i3syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i5syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i7kyk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7cjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7pjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i3cyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i5bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hnk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hvk

Intel Compute Card Firmware

Intel Compute Card Cd1c64gk

Intel Compute Card Cd1iv128mk

Intel Compute Card Cd1m3128mk

Intel Compute Card Cd1p64gk

Intel Compute Stick Firmware

Intel Compute Stick Stck1a32wfc

Intel Compute Stick Stck1a8lfc

Intel Compute Stick Stk2m364cc

Intel Compute Stick Stk2m3w64cc

Intel Compute Stick Stk2mv64cc

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html?wapkw=2019-11129

Event History

Jun 13, 2019

CVE Published

via MITRE·03:36 PM

Data Sourced

via MITRE·03:36 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-11129?

CVE-2019-11129 is a vulnerability in the system firmware for Intel(R) NUC Kit that may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

How severe is CVE-2019-11129?

CVE-2019-11129 has a severity value of 6.7, which is considered medium.

What software is affected by CVE-2019-11129?

The affected software includes Intel Nuc Kit Firmware and Intel Compute Card Firmware.

How can CVE-2019-11129 be exploited?

CVE-2019-11129 can be exploited by a privileged user with local access to potentially enable escalation of privilege, denial of service, and/or information disclosure.

Where can I find more information about CVE-2019-11129?

More information about CVE-2019-11129 can be found in the following references: [1] [2] [3].