CVE-2019-11140: Input Validation
First published: Mon Aug 19 2019(Updated: )
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Nuc Kit Firmware | ||
| Intel Nuc Kit Nuc7i3dnx | ||
| Intel Nuc Kit Nuc7i5dnx | ||
| Intel Nuc Kit Nuc7i7dnx | ||
| Intel Compute Stick Firmware | ||
| Intel Compute Stick Stk2mv64cc | ||
| Intel Compute Card Firmware | ||
| Intel Compute Card Cd1iv128mk |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-11140.
What is the severity of CVE-2019-11140?
The severity of CVE-2019-11140 is medium.
What can an attacker potentially do using this vulnerability?
An attacker can potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.
Which software is affected by this vulnerability?
The Intel NUC Kit Firmware and Intel Compute Stick Firmware are affected by this vulnerability.
Is the Intel NUC Kit Nuc7i3dnx vulnerable to CVE-2019-11140?
No, the Intel NUC Kit Nuc7i3dnx is not vulnerable to CVE-2019-11140.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel nuc kit firmware
- canonical/intel nuc kit nuc7i3dnx
- canonical/intel nuc kit nuc7i5dnx
- canonical/intel nuc kit nuc7i7dnx
- canonical/intel compute stick firmware
- canonical/intel compute stick stk2mv64cc
- canonical/intel compute card firmware
- canonical/intel compute card cd1iv128mk