CVE-2019-14612
Medium
Description
Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Nuc 8 Mainstream Game Kit Firmware
PublishedDec 16, 2019
First seenDec 16, 2019
How to fix
Update
- intel nuc_8_mainstream_game_kit_firmware0036 or later
- intel nuc_8_mainstream_game_mini_computer_firmware0036 or later
- intel nuc8i7bek_firmware0077 or later
- intel cd1p64gk_firmware0053 or later
- intel nuc8i3cysm_firmware0043 or later
- intel nuc8i7hnk_firmware0059 or later
- intel nuc7i7dnke_firmware0067 or later
- intel nuc7i5dnke_firmware0067 or later
- intel nuc7i3dnhe_firmware0067 or later
- intel stk2mv64cc_firmware0061 or later
- intel stk2m3w64cc_firmware0062 or later
- intel nuc6i7kyk_firmware0066 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_8_mainstream_game_kit_firmware | v < 0036 | 0036 |
| intel nuc_8_mainstream_game_mini_computer_firmware | v < 0036 | 0036 |
| intel nuc8i7bek_firmware | v < 0077 | 0077 |
| intel cd1p64gk_firmware | v < 0053 | 0053 |
| intel nuc8i3cysm_firmware | v < 0043 | 0043 |
| intel nuc8i7hnk_firmware | v < 0059 | 0059 |
| intel nuc7i7dnke_firmware | v < 0067 | 0067 |
| intel nuc7i5dnke_firmware | v < 0067 | 0067 |
| intel nuc7i3dnhe_firmware | v < 0067 | 0067 |
| intel stk2mv64cc_firmware | v < 0061 | 0061 |
| intel stk2m3w64cc_firmware | v < 0062 | 0062 |
| intel nuc6i7kyk_firmware | v < 0066 | 0066 |
| intel nuc6i5syh_firmware | v < 0072 | 0072 |
| intel nuc7cjyh_firmware | v < 0053 | 0053 |
| intel cd1m3128mk_firmware | v < 0058 | 0058 |
| intel cd1iv128mk_firmware | v < 0038 | 0038 |
| intel nuc6cays_firmware | v < 0064 | 0064 |
| intel de3815tybe_firmware | v < 0024 | 0024 |
| intel d34010wyb_firmware | v < 0054 | 0054 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.