Intel Nuc Kit Firmware vulnerabilities

11 CVEs affecting Intel Nuc Kit Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11140, published 2019-08-19.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11128, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via…
• CVE-2019-11127, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
• CVE-2018-12176, published 2018-09-12. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial…
• CVE-2019-11129, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local…
• CVE-2019-11126, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
• CVE-2019-11125, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via…
• CVE-2019-11124, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local…
• CVE-2019-11123, published 2019-06-13. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via…
• CVE-2019-11140, published 2019-08-19. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via…
• CVE-2019-11094, published 2019-05-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure…

Latest

• CVE-2017-3718, published 2019-01-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.