CVE-2019-11140: Input Validation
Published Aug 19, 2019
·Updated
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Affected Software
8 affected components
Intel Nuc Kit Firmware
Intel Nuc Kit Nuc7i3dnx
Intel Nuc Kit Nuc7i5dnx
Intel Nuc Kit Nuc7i7dnx
Intel Compute Stick Firmware
Intel Compute Stick Stk2mv64cc
Intel Compute Card Firmware
Intel Compute Card Cd1iv128mk
Remediation
Event History
Aug 19, 2019
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-11140.
2
What is the severity of CVE-2019-11140?
The severity of CVE-2019-11140 is medium.
3
What can an attacker potentially do using this vulnerability?
An attacker can potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.
4
Which software is affected by this vulnerability?
The Intel NUC Kit Firmware and Intel Compute Stick Firmware are affected by this vulnerability.
5
Is the Intel NUC Kit Nuc7i3dnx vulnerable to CVE-2019-11140?
No, the Intel NUC Kit Nuc7i3dnx is not vulnerable to CVE-2019-11140.