Vulnerability-Lookup

BDU:2019-02165

Vulnerability from fstec - Published: 11.06.2019

Title

Уязвимость встроенного программного обеспечения Intel NUC Kit, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ к защищаемой информации, вызвать отказ в обслуживании или повысить свои привилегии

Description

Уязвимость встроенного программного обеспечения Intel NUC Kit вызвана чтением за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации, вызвать отказ в обслуживании или повысить свои привилегии

Severity ?


                    
                      AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Vendor

Intel Corp.

Software Name

Intel NUC Kit NUC8i7HNK, Intel NUC Kit NUC8i7HVK, Intel NUC Kit NUC8i3BEx, Intel NUC Kit NUC8i5BEx, Intel NUC Kit NUC8i7BEx, Intel Compute Card CD1C64GK, Intel Compute Card CD1P64GK, Intel NUC Kit NUC8i3CYx, Intel NUC Kit NUC7i3DNx, Intel NUC Kit NUC7i5DNx, Intel NUC Kit NUC7i7DNx, Intel Compute Stick STK2M3W64CC, Intel Compute Stick STK2M364CC, Intel Compute Stick STK2MV64CC, Intel NUC Kit NUC6i7KYk, Intel NUC Kit NUC7PJY, Intel NUC Kit NUC7CJY, Intel NUC KitNUC6CAYx, Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A), Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A), Intel NUC Kit NUC5CPYH, Intel NUC Kit NUC5PGYH, Intel NUC Kit NUC5PPYH, Intel NUC Kit NUC5i3RYx, Intel NUC Kit NUC5i5RYx, Intel NUC Kit NUC5i7RYx, Intel NUC Kit D34010WYx, Intel NUC Kit D54250WYx, Intel NUC Kit NUC6i3SYx, Intel NUC Kit NUC6i5SYx, Intel NUC Kit NUC7i3BNx, Intel NUC Kit NUC7i5BNx, Intel NUC Kit NUC7i7BNx, Intel Compute Card CD1IV128MK, Intel Compute Card CD1M3128MK, Intel Compute Stick STCK1A8LFC, Intel Compute Stick STCK1A32WFC, Intel NUC Kit DN2820FYKH, Intel NUC Kit NUC5i5MYx, Intel NUC Kit NUC5i3MYx

Software Version

до 0054 (Intel NUC Kit NUC8i7HNK), до 0054 (Intel NUC Kit NUC8i7HVK), до 0071 (Intel NUC Kit NUC8i3BEx), до 0071 (Intel NUC Kit NUC8i5BEx), до 0071 (Intel NUC Kit NUC8i7BEx), до 0050 (Intel Compute Card CD1C64GK), до 0050 (Intel Compute Card CD1P64GK), до 0040 (Intel NUC Kit NUC8i3CYx), до 0063 (Intel NUC Kit NUC7i3DNx), до 0063 (Intel NUC Kit NUC7i5DNx), до 0063 (Intel NUC Kit NUC7i7DNx), до 0060 (Intel Compute Stick STK2M3W64CC), до 0060 (Intel Compute Stick STK2M364CC), до 0060 (Intel Compute Stick STK2MV64CC), до 0062 (Intel NUC Kit NUC6i7KYk), до 0049 (Intel NUC Kit NUC7PJY), до 0049 (Intel NUC Kit NUC7CJY), до 0060 (Intel NUC KitNUC6CAYx), до 0020 (Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A)), до 0065 (Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A)), до 0076 (Intel NUC Kit NUC5CPYH), до 0076 (Intel NUC Kit NUC5PGYH), до 0076 (Intel NUC Kit NUC5PPYH), до 0379 (Intel NUC Kit NUC5i3RYx), до 0379 (Intel NUC Kit NUC5i5RYx), до 0379 (Intel NUC Kit NUC5i7RYx), до 0051 (Intel NUC Kit D34010WYx), до 0051 (Intel NUC Kit D54250WYx), до 0070 (Intel NUC Kit NUC6i3SYx), до 0070 (Intel NUC Kit NUC6i5SYx), до 0079 (Intel NUC Kit NUC7i3BNx), до 0079 (Intel NUC Kit NUC7i5BNx), до 0079 (Intel NUC Kit NUC7i7BNx), до 0036 (Intel Compute Card CD1IV128MK), до 0056 (Intel Compute Card CD1M3128MK), до 0039 (Intel Compute Stick STCK1A8LFC), до 0039 (Intel Compute Stick STCK1A32WFC), до 0067 (Intel NUC Kit DN2820FYKH), до 0051 (Intel NUC Kit NUC5i5MYx), до 0054 (Intel NUC Kit NUC5i3MYx)

Possible Mitigations

Использование рекомендаций: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html

Reference

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html https://vuldb.com/?id.136463

CWE

CWE-119

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 0054 (Intel NUC Kit NUC8i7HNK), \u0434\u043e 0054 (Intel NUC Kit NUC8i7HVK), \u0434\u043e 0071 (Intel NUC Kit NUC8i3BEx), \u0434\u043e 0071 (Intel NUC Kit NUC8i5BEx), \u0434\u043e 0071 (Intel NUC Kit NUC8i7BEx), \u0434\u043e 0050 (Intel Compute Card CD1C64GK), \u0434\u043e 0050 (Intel Compute Card CD1P64GK), \u0434\u043e 0040 (Intel NUC Kit NUC8i3CYx), \u0434\u043e 0063 (Intel NUC Kit NUC7i3DNx), \u0434\u043e 0063 (Intel NUC Kit NUC7i5DNx), \u0434\u043e 0063 (Intel NUC Kit NUC7i7DNx), \u0434\u043e 0060 (Intel Compute Stick STK2M3W64CC), \u0434\u043e 0060 (Intel Compute Stick STK2M364CC), \u0434\u043e 0060 (Intel Compute Stick STK2MV64CC), \u0434\u043e 0062 (Intel NUC Kit NUC6i7KYk), \u0434\u043e 0049 (Intel NUC Kit NUC7PJY), \u0434\u043e 0049 (Intel NUC Kit NUC7CJY), \u0434\u043e 0060 (Intel NUC KitNUC6CAYx), \u0434\u043e 0020 (Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A)), \u0434\u043e 0065 (Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A)), \u0434\u043e 0076 (Intel NUC Kit NUC5CPYH), \u0434\u043e 0076 (Intel NUC Kit NUC5PGYH), \u0434\u043e 0076 (Intel NUC Kit NUC5PPYH), \u0434\u043e 0379 (Intel NUC Kit NUC5i3RYx), \u0434\u043e 0379 (Intel NUC Kit NUC5i5RYx), \u0434\u043e 0379 (Intel NUC Kit NUC5i7RYx), \u0434\u043e 0051 (Intel NUC Kit D34010WYx), \u0434\u043e 0051 (Intel NUC Kit D54250WYx), \u0434\u043e 0070 (Intel NUC Kit NUC6i3SYx), \u0434\u043e 0070 (Intel NUC Kit NUC6i5SYx), \u0434\u043e 0079 (Intel NUC Kit NUC7i3BNx), \u0434\u043e 0079 (Intel NUC Kit NUC7i5BNx), \u0434\u043e 0079 (Intel NUC Kit NUC7i7BNx), \u0434\u043e 0036 (Intel Compute Card CD1IV128MK), \u0434\u043e 0056 (Intel Compute Card CD1M3128MK), \u0434\u043e 0039 (Intel Compute Stick STCK1A8LFC), \u0434\u043e 0039 (Intel Compute Stick STCK1A32WFC), \u0434\u043e 0067 (Intel NUC Kit DN2820FYKH), \u0434\u043e 0051 (Intel NUC Kit NUC5i5MYx), \u0434\u043e 0054 (Intel NUC Kit NUC5i3MYx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.06.2019",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "21.06.2019",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2019-02165",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-11124",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel NUC Kit NUC8i7HNK, Intel NUC Kit NUC8i7HVK, Intel NUC Kit NUC8i3BEx, Intel NUC Kit NUC8i5BEx, Intel NUC Kit NUC8i7BEx, Intel Compute Card CD1C64GK, Intel Compute Card CD1P64GK, Intel NUC Kit NUC8i3CYx, Intel NUC Kit NUC7i3DNx, Intel NUC Kit NUC7i5DNx, Intel NUC Kit NUC7i7DNx, Intel Compute Stick STK2M3W64CC, Intel Compute Stick STK2M364CC, Intel Compute Stick STK2MV64CC, Intel NUC Kit NUC6i7KYk, Intel NUC Kit NUC7PJY, Intel NUC Kit NUC7CJY, Intel NUC KitNUC6CAYx, Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT20H.86A), Intel NUC Kit DE3815TYB (BIOS ID CODE TYBYT10H.86A), Intel NUC Kit NUC5CPYH, Intel NUC Kit NUC5PGYH, Intel NUC Kit NUC5PPYH, Intel NUC Kit NUC5i3RYx, Intel NUC Kit NUC5i5RYx, Intel NUC Kit NUC5i7RYx, Intel NUC Kit D34010WYx, Intel NUC Kit D54250WYx, Intel NUC Kit NUC6i3SYx, Intel NUC Kit NUC6i5SYx, Intel NUC Kit NUC7i3BNx, Intel NUC Kit NUC7i5BNx, Intel NUC Kit NUC7i7BNx, Intel Compute Card CD1IV128MK, Intel Compute Card CD1M3128MK, Intel Compute Stick STCK1A8LFC, Intel Compute Stick STCK1A32WFC, Intel NUC Kit DN2820FYKH, Intel NUC Kit NUC5i5MYx, Intel NUC Kit NUC5i3MYx",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Intel NUC Kit, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Intel NUC Kit \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BIOS",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html\nhttps://vuldb.com/?id.136463",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)"
}

CVE-2019-11124 (GCVE-0-2019-11124)

Vulnerability from cvelistv5 – Published: 2019-06-13 15:36 – Updated: 2024-08-04 22:48

Summary

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Severity ?

No CVSS data available.

CWE

escalation of privilege, denial of service and/or information disclosure

Assigner

intel

References

URL

Tags

	https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/108766	vdb-entryx_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	Intel(R) NUC Firmware	Affected: Please see reference document.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:08.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html"
          },
          {
            "name": "108766",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108766"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC Firmware",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Please see reference document."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege, denial of service and/or information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-24T15:46:16.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html"
        },
        {
          "name": "108766",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108766"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-11124",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC Firmware",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Please see reference document."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege, denial of service and/or information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html"
            },
            {
              "name": "108766",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108766"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-11124",
    "datePublished": "2019-06-13T15:36:25.000Z",
    "dateReserved": "2019-04-11T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:48:08.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2019-02165

CVE-2019-11124 (GCVE-0-2019-11124)

Tags

Sightings

Nomenclature