CVE-2019-14570
High
Description
Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
SeverityHigh
CVSS7.8
Exploit probability—
ProductIntel Nuc 8 Mainstream Game Kit Firmware
PublishedOct 11, 2019
First seenOct 11, 2019
How to fix
Update
- intel nuc_8_mainstream_game_kit_firmwareinwhl357 or later
- intel nuc_8_mainstream_game_mini_computer_firmwareinwhl357 or later
- intel nuc_board_de3815tybe_firmwarety0022, ty0067 or later
- intel nuc_kit_de3815tykhe_firmwarety0022, ty0067 or later
- intel nuc_kit_dn2820fykh_firmwarefy0069 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_8_mainstream_game_kit_firmware | v < inwhl357 | inwhl357 |
| intel nuc_8_mainstream_game_mini_computer_firmware | v < inwhl357 | inwhl357 |
| intel nuc_board_de3815tybe_firmware | v < ty0022, v < ty0067 | ty0022, ty0067 |
| intel nuc_kit_de3815tykhe_firmware | v < ty0022, v < ty0067 | ty0022, ty0067 |
| intel nuc_kit_dn2820fykh_firmware | v < fy0069 | fy0069 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.