CVE-2019-14611: Intel CD1IV128MK Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel CD1IV128MK Firmware: before 0038 (fixed in 0038)
• Intel CD1M3128MK Firmware: before 0058 (fixed in 0058)
• Intel CD1P64GK Firmware: before 0053 (fixed in 0053)
• Intel d34010wyb Firmware: before 0054 (fixed in 0054)
• Intel DE3815TYBE Firmware: before 0024 (fixed in 0024)
• Intel NUC6CAYS Firmware: before 0064 (fixed in 0064)
• Intel NUC6I5SYH Firmware: before 0072 (fixed in 0072)
• Intel NUC6I7KYK Firmware: before 0066 (fixed in 0066)
• Intel NUC7CJYH Firmware: before 0053 (fixed in 0053)
• Intel NUC7I3DNHE Firmware: before 0067 (fixed in 0067)
• Intel NUC7I5DNKE Firmware: before 0067 (fixed in 0067)
• Intel NUC7I7DNKE Firmware: before 0067 (fixed in 0067)
• Intel NUC8I3CYSM Firmware: before 0043 (fixed in 0043)
• Intel NUC8I7BEK Firmware: before 0077 (fixed in 0077)
• Intel NUC8I7HNK Firmware: before 0059 (fixed in 0059)
• Intel Nuc 8 Mainstream Game Kit Firmware: before 0036 (fixed in 0036)
• Intel Nuc 8 Mainstream Game Mini Computer Firmware: before 0036 (fixed in 0036)
• Intel STK2M3W64CC Firmware: before 0062 (fixed in 0062)
• Intel STK2MV64CC Firmware: before 0061 (fixed in 0061)

Published 2019-12-16. Last modified 2026-06-17.