Vulnerabilites related to intel - stk2mv64cc
Vulnerability from fkie_nvd
Published
2019-12-16 20:15
Modified
2024-11-21 04:27
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc_8_mainstream_game_kit_firmware *
intel nuc_8_mainstream_game_kit -
intel nuc_8_mainstream_game_mini_computer_firmware *
intel nuc_8_mainstream_game_mini_computer -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i3cysm_firmware *
intel nuc8i3cysm -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel stk2m3w64cc_firmware *
intel stk2m3w64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc6i5syh_firmware *
intel nuc6i5syh -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel cd1m3128mk_firmware *
intel cd1m3128mk -
intel cd1iv128mk_firmware *
intel cd1iv128mk -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel d34010wyb_firmware *
intel d34010wyb -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBFF7E0-4BC0-4E68-82A5-B278ECEB1122",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "365D716A-73F7-4F20-A4F5-0FE53E08E014",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B5CC5A-30B0-4AA7-805E-05F70C39E0B9",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC228AB-19E6-4C1E-82D7-113CB02CB9B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03D6FF33-3832-40A1-8E5F-900D3C32B350",
              "versionEndExcluding": "0077",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF2A976-4171-43C1-8B3E-1985B98F8AD2",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D658393-6F10-4883-804B-A2B84625958D",
              "versionEndExcluding": "0043",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70041B5F-C057-49F8-B949-B5F690680893",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A654417-AF25-4BCC-8965-ADA5B3B9C060",
              "versionEndExcluding": "0059",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C41138-573B-43DE-83F6-C760ECF6D6E5",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F987C74-0FF8-48FD-AECC-5F90AB02A968",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E04AAD-D2D3-4973-8C26-14C2A77084B3",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF27C3F-0F41-4DAE-8972-52CDB0E0BC57",
              "versionEndExcluding": "0061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13F6B0D-1DF1-493D-82F6-F88442807E67",
              "versionEndExcluding": "0062",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7C10A5-D65B-4AF1-B200-BFC6B5E5BFE0",
              "versionEndExcluding": "0066",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6ED9789-5524-40BC-A5B6-9E90AD7CDAC3",
              "versionEndExcluding": "0072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EFD543E-DD44-403D-A81F-9F7668F9A473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99394CE6-5D41-4856-BE47-AAE11D2845BB",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43FAC38A-198A-445B-BBEF-7F5C733AD912",
              "versionEndExcluding": "0058",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9290D1EF-ADCC-428B-A6B6-DD204A660A32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17FAF1D5-59AD-478D-A21B-1FDFD35AC9F3",
              "versionEndExcluding": "0038",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A488AFAB-566C-44EF-B211-38F87EF2164D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6425331-88CE-42C6-9C8E-9CAFB16A25E4",
              "versionEndExcluding": "0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFF6A0FB-8392-4A7B-93DE-CD6398016C8B",
              "versionEndExcluding": "0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BCF873-1788-4670-A29F-72A464C77228",
              "versionEndExcluding": "0054",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E95BD4-13B0-4687-89F2-0CFA0366E9FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Unas restricciones de b\u00fafer inapropiadas en el firmware para Intel(R) NUC(R), pueden permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios por medio de un acceso local."
    }
  ],
  "id": "CVE-2019-14608",
  "lastModified": "2024-11-21T04:27:01.803",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-12-16T20:15:15.227",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2017-07-26 15:29
Modified
2025-04-20 01:37
Severity ?
9.0 (Critical) - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Summary
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
References
secure@intel.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_usThird Party Advisory
secure@intel.comhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-frVendor Advisory
secure@intel.comhttps://support.lenovo.com/us/en/product_security/LEN-15184
af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_usThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-frVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://support.lenovo.com/us/en/product_security/LEN-15184
Impacted products
Vendor Product Version
intel nuc7i3bnk_bios -
intel nuc7i3bnk -
intel nuc7i5bnk_bios -
intel nuc7i5bnk -
intel nuc7i7bnh_bios -
intel nuc7i7bnh -
intel stk2mv64cc_bios -
intel stk2mv64cc -
intel stk2m3w64cc_bios -
intel stk2m3w64cc -
intel nuc6i7kyk_bios -
intel nuc6i7kyk -
intel nuc6i3syk_bios -
intel nuc6i3syk -
intel nuc6i5syk_bios -
intel nuc6i5syk -
intel r1304sposhor_bios -
intel r1304sposhor -
intel r1304sposhorr_bios -
intel r1304sposhorr -
intel r1208sposhorr_bios -
intel r1208sposhorr -
intel lr1304spcfg1r_bios -
intel lr1304spcfg1r -
intel r1208sposhor_bios -
intel r1208sposhor -
intel s1200spsr_bios -
intel s1200spsr -
intel s1200spor_bios -
intel s1200spor -
intel lr1304spcfg1_bios -
intel lr1304spcfg1 -
intel s1200spl_bios -
intel s1200spl -
intel s1200spo_bios -
intel s1200spo -
intel s1200sps_bios -
intel s1200sps -
intel r1304sposhbn_bios -
intel r1304sposhbn -
intel s1200splr_bios -
intel s1200splr -
intel r1304sposhbnr_bios -
intel r1304sposhbnr -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnk_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "682EDAC2-F993-4401-B649-B5C49E3E1761",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnk_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "384BE426-912A-4BFD-8AE7-BEB0F941DF7B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBF91B19-0FA1-4CE8-B729-A09612466725",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnh_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "71D0E50D-B369-4C82-91DB-AD44A71736EE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3E5D206-247A-41BA-BAE6-83F482D1090A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE204F78-8A38-4FC5-BCBF-6EB40015ABAE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4414D9EF-D36D-4190-8581-3E0370764CA3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i3syk_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A5C2391-2CD8-49F6-BDAE-B79670CEC3B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i3syk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "035B570B-8441-4F84-A441-FFBD1378EE6E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syk_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EF24505-0212-4152-80FD-F80792E51E9C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9AEC7B5-E79D-4CB0-8BA9-4ED6001603D4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1304sposhor_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4ECEC599-486C-45B6-9D5C-73CCDF1BD5BD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1304sposhor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3684B23-A791-43B9-8426-EE79463E9471",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1304sposhorr_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "44FBDCDD-2015-45EE-BDFD-0876F20A58E6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1304sposhorr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB43BBF2-C737-4246-8943-E21178192050",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1208sposhorr_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "921BA513-3719-4213-BB0B-96062C64459D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1208sposhorr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2392C7B-4401-4ECF-9AF2-AED3B375DA1A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:lr1304spcfg1r_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F05649F5-F879-434D-9BAC-AA95AA011DE6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:lr1304spcfg1r:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "846E6438-E23A-4444-94C1-8E9326B53FC5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1208sposhor_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20CD2904-77C2-4F70-A187-469895E53B37",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1208sposhor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB4BADBE-93D4-44C6-8307-72A5351587F1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200spsr_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "93285F46-461A-4BA2-B195-A7869E194CDF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200spsr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B19990B5-8D2D-4A9F-B323-2E82B46ACAF3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200spor_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0563A19E-8ABD-4652-B5CB-D64DBD96BD9B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200spor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1F0421C-DD38-4FAD-8EA8-A264025A3C6D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:lr1304spcfg1_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59866E74-BB74-450C-8375-61C86FA6E261",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:lr1304spcfg1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3353F12-6B1E-479A-88A0-51315E377891",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200spl_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EACE8E81-E786-4262-AAF5-738756B5E549",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200spl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFED93FA-650A-4908-9D22-DFA1013A9AF4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200spo_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D7AF551-F825-4E09-AC7E-B94CB21B56D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200spo:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06306DD8-2347-4A9A-8A4A-2D283F784207",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200sps_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59A87E1D-1BAF-4A11-894C-0FF1592B6561",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200sps:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB414F9E-02B4-4CD4-9534-35BD478A9598",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1304sposhbn_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEB2AA41-AB3A-41B4-AF30-B3970A5971D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1304sposhbn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1698F3C-7D8C-4C5F-AB32-4176E363EC77",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:s1200splr_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8245B6D7-B1E8-4B63-AA5D-E9C2BB132F75",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:s1200splr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB1CAD2B-7D17-4D75-9746-C6AF049F6C04",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:r1304sposhbnr_bios:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "52415BC5-A21B-45E2-BE4D-9BF4FF9CB0A5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:r1304sposhbnr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB06D22E-814F-4B2E-BDB6-E8ADB0EDC7EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state."
    },
    {
      "lang": "es",
      "value": "La comprobaci\u00f3n incorrecta en los procesadores Intel de las familias de procesadores Intel Core de 6a y 7a generaci\u00f3n, de las familias de productos Intel Xeon E3-1500M versiones v5 y v6, y de las familias de productos Intel Xeon E3-1200 versiones v5 y v6, permite que el firmware del sistema comprometido impacte la seguridad SGX por medio de un estado inicial incorrecto del sistema."
    }
  ],
  "id": "CVE-2017-5691",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-07-26T15:29:00.283",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us"
    },
    {
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr"
    },
    {
      "source": "secure@intel.com",
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15184"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15184"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2016-12-08 17:59
Modified
2025-04-12 10:46
Severity ?
6.7 (Medium) - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform.
References
secure@intel.comhttp://www.securityfocus.com/bid/95012Third Party Advisory, VDB Entry
secure@intel.comhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057&languageid=en-frVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/95012Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057&languageid=en-frVendor Advisory
Impacted products
Vendor Product Version
intel city_bios *
intel stk2m3w64cc -
intel canyon_bios *
intel nuc6i7kyb -
intel canyon_bios *
intel nuc5cpyh -
intel nuc5pgyh -
intel nuc5ppyh -
intel city_bios ccsklm30.86a
intel stk2mv64cc -
intel canyon_bios *
intel dn2820fyb -
intel city_bios *
intel stk2m3w64cc -
intel swift_canyon_bios *
intel nuc6i3syb -
intel nuc6i5syb -
intel citry_bios *
intel stk1aw32sc -
intel canyon_bios *
intel nuc5i3mybe -
intel canyon_bios *
intel nuc5i3mybe -
intel city_bios *
intel stk1a32sc -
intel stk1aw32sc -
intel canyon_bios *
intel nuc5i3ryb -
intel nuc5i5ryb -
intel nuc5i7rykh -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F0CE04C-A5D0-471C-8B23-2D5B41D130D0",
              "versionEndIncluding": "ccsklm5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "07BD9752-DE75-4F3D-BB09-5A301D400C0E",
              "versionEndIncluding": "kyskli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C68C682E-7C48-4CBC-B930-56EB93765480",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "88D4C2C3-6CF9-4A18-9523-F29B9BA6C269",
              "versionEndIncluding": "pybwcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5cpyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AEC08E1-22C7-4C2F-AB3E-1A65C09B1CFB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:nuc5pgyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA76A826-FA4E-4B1E-8B24-77799D3727DB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:nuc5ppyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "83C621C2-6FA8-427F-BE2C-2DB6B5A910E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:city_bios:ccsklm30.86a:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4F4857B-08FC-4516-BFB1-12A0021894C2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D641BC47-E80C-4BA2-AD3E-3BC0DCC17069",
              "versionEndIncluding": "fybyt10h.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:dn2820fyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06AE2097-A3C0-4241-9B8D-540AD1E71A67",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "04A09FCF-F784-4DBC-9676-9ACDCC5101F2",
              "versionEndIncluding": "ccsklm30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:swift_canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAA69CC5-704E-492E-B5DD-EB7C62735057",
              "versionEndIncluding": "syskli35.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i3syb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2399979E-026B-4A1B-953F-CEE188ECB305",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9C1CE90-5183-49B9-A477-3B78D186DC70",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:citry_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C730B3C5-6F79-49FA-8A17-D818D8776DA3",
              "versionEndIncluding": "scchtax5.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk1aw32sc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B7E1240-3DAB-40A1-A7C5-20FDBFC344A9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2620DC57-3EAE-4026-A378-66D338886F60",
              "versionEndIncluding": "mybdwi5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3mybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3371249-3123-49D8-80C1-A2EFFF1FC859",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA9AAD87-59E0-4708-87E8-26931FA088AF",
              "versionEndIncluding": "mybdwi30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3mybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3371249-3123-49D8-80C1-A2EFFF1FC859",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A14C8D9-1F2F-4519-B645-693B51F06A52",
              "versionEndIncluding": "scchtax5.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk1a32sc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A109261-534E-4D0C-B94A-2194CBF2FF13",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:stk1aw32sc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B7E1240-3DAB-40A1-A7C5-20FDBFC344A9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "21A69392-379C-43BF-8BB6-5BBC6AE3E588",
              "versionEndIncluding": "rybdwi35.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3ryb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB003BB8-022A-4DDB-A025-38363EDCEB17",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5ryb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7F6B597-D173-4F9E-A6BB-3E7E56251A4A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:nuc5i7rykh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E95E0035-96A5-40D8-BE5B-1DF95EC25687",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform."
    },
    {
      "lang": "es",
      "value": "Llamada SMM en todos los Intel Branded NUC Kits permite a usuarios locales privilegiados acceder al System Management Mode y tomar el control completo de la plataforma."
    }
  ],
  "id": "CVE-2016-8103",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.8,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-12-08T17:59:01.583",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/95012"
    },
    {
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/95012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2023-05-10 14:15
Modified
2024-11-21 06:57
Severity ?
7.5 (High) - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc8cchb_firmware -
intel nuc8cchb -
intel nuc8cchbn_firmware -
intel nuc8cchbn -
intel nuc8cchkrn_firmware -
intel nuc8cchkrn -
intel nuc8cchkr_firmware -
intel nuc8cchkr -
intel nuc8i7hnkqc_firmware -
intel nuc8i7hnkqc -
intel nuc8i7hvkva_firmware -
intel nuc8i7hvkva -
intel nuc8i7hvkvaw_firmware -
intel nuc8i7hvkvaw -
intel nuc8i7hvk_firmware -
intel nuc8i7hvk -
intel nuc8i7hnk_firmware -
intel nuc8i7hnk -
intel stk2mv64cc_firmware -
intel stk2mv64cc -
intel nuc7cjysamn_firmware -
intel nuc7cjysamn -
intel nuc7cjysal_firmware -
intel nuc7cjysal -
intel nuc7cjyhn_firmware -
intel nuc7cjyhn -
intel nuc7pjyhn_firmware -
intel nuc7pjyhn -
intel nuc7pjyh_firmware -
intel nuc7pjyh -
intel nuc7cjyh_firmware -
intel nuc7cjyh -
intel nuc8i3cysn_firmware -
intel nuc8i3cysn -
intel nuc8i7inh_firmware -
intel nuc8i7inh -
intel nuc8i5inh_firmware -
intel nuc8i5inh -
intel nuc8i7inh_firmware -
intel nuc8i7inh -
intel nuc8i5inh_firmware -
intel nuc8i5inh -
intel nuc7cjysamn_firmware -
intel nuc7cjysamn -
intel nuc7cjysal_firmware -
intel nuc7cjysal -
intel nuc7cjyhn_firmware -
intel nuc7cjyhn -
intel nuc7pjyhn_firmware -
intel nuc7pjyhn -
intel nuc7pjyh_firmware -
intel nuc7pjyh -
intel nuc7cjyh_firmware -
intel nuc7cjyh -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8cchb_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "49F92166-04EA-490D-984D-F26AFBBAC7A2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8cchb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD537400-953F-495C-B041-495884AC38C1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8cchbn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E334171-B7BE-4F9A-89FC-116A3795DDB4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8cchbn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B79A51E-4EBB-4195-BC08-8D7ACF5FC1AB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8cchkrn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F9F00DA-9890-4D56-9863-2A5D9A43C2AA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8cchkrn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6B686CB-E81E-49FB-810B-9931D24ADC3E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8cchkr_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D99588F-8B42-4C02-B7EC-D2C93DDDBA07",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8cchkr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAE6C67B-D982-47B5-9F63-649EC4D50BD0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnkqc_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2F17412-F144-4612-841B-3FDF98F9A067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnkqc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00149C0A-A05B-40D3-8DFD-0867B2A71436",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvkva_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6809B350-9EE2-49F8-B0B4-147B52187B3A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvkva:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "81544988-95CC-4CCF-938C-27A3DA94C479",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvkvaw_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "74757B2E-0633-4E7C-BF5E-F9655F5E387B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvkvaw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B53EC7FA-8BB8-4021-9B56-75B2CCD4F2E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvk_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "052F6AAA-9020-4CC6-A0B0-DB9FA3D204DA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA600CE0-C6A5-4844-B8A4-17CA897060BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BA05987-622B-4EB0-84B3-3C1361E67CD8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1355BA7-702D-499C-B147-1E4FC84153C6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjysamn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "65610A9F-FF96-45B5-9E7C-E371C62B1572",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjysamn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC7F3EBD-45B3-4F7C-9F5E-50418AAFB538",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjysal_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCFEEE42-9380-4D4B-ACC2-86A1C2060390",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjysal:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7883EA-D255-4611-A14B-2122A5873747",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyhn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "98D0DCFC-B952-4703-82D4-0F8600FF6B15",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyhn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A71B8FF-405E-42DE-B57C-E8063F3B6D0A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7pjyhn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE72942-A804-40D7-9929-26117870D2F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7pjyhn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "68DD1BAD-7E7A-41D0-8559-00C9F36C55BB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7pjyh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "956673CA-14A2-4B18-89DF-096576DFE44A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7pjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "458E0FF7-D70D-4B28-875F-22E485E69339",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "230D51C3-D9DC-42B8-93DA-7D961C9373A2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31D17035-DDF9-476D-86A3-92DA9F3D7A23",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37A0EF5E-FE9B-4CE7-93E3-A6D7EF7AFBB5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7inh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D20BBDE-2952-4C35-83D6-E21E60C7AAD2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7inh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2100AC82-E3E1-495D-9252-AA69D04405A8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5inh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DA760F2-8CA7-4731-80B1-C9530ACC90F7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5inh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42F0F0B6-D0BE-4B8D-BF9E-B64DA3F96550",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7inh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D20BBDE-2952-4C35-83D6-E21E60C7AAD2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7inh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2100AC82-E3E1-495D-9252-AA69D04405A8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5inh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DA760F2-8CA7-4731-80B1-C9530ACC90F7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5inh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42F0F0B6-D0BE-4B8D-BF9E-B64DA3F96550",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjysamn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "65610A9F-FF96-45B5-9E7C-E371C62B1572",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjysamn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC7F3EBD-45B3-4F7C-9F5E-50418AAFB538",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjysal_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCFEEE42-9380-4D4B-ACC2-86A1C2060390",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjysal:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7883EA-D255-4611-A14B-2122A5873747",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyhn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "98D0DCFC-B952-4703-82D4-0F8600FF6B15",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyhn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A71B8FF-405E-42DE-B57C-E8063F3B6D0A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7pjyhn_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE72942-A804-40D7-9929-26117870D2F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7pjyhn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "68DD1BAD-7E7A-41D0-8559-00C9F36C55BB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7pjyh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "956673CA-14A2-4B18-89DF-096576DFE44A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7pjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "458E0FF7-D70D-4B28-875F-22E485E69339",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "230D51C3-D9DC-42B8-93DA-7D961C9373A2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access."
    }
  ],
  "id": "CVE-2022-28699",
  "lastModified": "2024-11-21T06:57:45.670",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 6.0,
        "source": "secure@intel.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-10T14:15:11.267",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "secure@intel.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2019-12-16 20:15
Modified
2024-11-21 04:27
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc_8_mainstream_game_kit_firmware *
intel nuc_8_mainstream_game_kit -
intel nuc_8_mainstream_game_mini_computer_firmware *
intel nuc_8_mainstream_game_mini_computer -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i3cysm_firmware *
intel nuc8i3cysm -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel stk2m3w64cc_firmware *
intel stk2m3w64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc6i5syh_firmware *
intel nuc6i5syh -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel cd1m3128mk_firmware *
intel cd1m3128mk -
intel cd1iv128mk_firmware *
intel cd1iv128mk -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel d34010wyb_firmware *
intel d34010wyb -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBFF7E0-4BC0-4E68-82A5-B278ECEB1122",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "365D716A-73F7-4F20-A4F5-0FE53E08E014",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B5CC5A-30B0-4AA7-805E-05F70C39E0B9",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC228AB-19E6-4C1E-82D7-113CB02CB9B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03D6FF33-3832-40A1-8E5F-900D3C32B350",
              "versionEndExcluding": "0077",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF2A976-4171-43C1-8B3E-1985B98F8AD2",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D658393-6F10-4883-804B-A2B84625958D",
              "versionEndExcluding": "0043",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70041B5F-C057-49F8-B949-B5F690680893",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A654417-AF25-4BCC-8965-ADA5B3B9C060",
              "versionEndExcluding": "0059",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C41138-573B-43DE-83F6-C760ECF6D6E5",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F987C74-0FF8-48FD-AECC-5F90AB02A968",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E04AAD-D2D3-4973-8C26-14C2A77084B3",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF27C3F-0F41-4DAE-8972-52CDB0E0BC57",
              "versionEndExcluding": "0061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13F6B0D-1DF1-493D-82F6-F88442807E67",
              "versionEndExcluding": "0062",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7C10A5-D65B-4AF1-B200-BFC6B5E5BFE0",
              "versionEndExcluding": "0066",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6ED9789-5524-40BC-A5B6-9E90AD7CDAC3",
              "versionEndExcluding": "0072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EFD543E-DD44-403D-A81F-9F7668F9A473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99394CE6-5D41-4856-BE47-AAE11D2845BB",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43FAC38A-198A-445B-BBEF-7F5C733AD912",
              "versionEndExcluding": "0058",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9290D1EF-ADCC-428B-A6B6-DD204A660A32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17FAF1D5-59AD-478D-A21B-1FDFD35AC9F3",
              "versionEndExcluding": "0038",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A488AFAB-566C-44EF-B211-38F87EF2164D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6425331-88CE-42C6-9C8E-9CAFB16A25E4",
              "versionEndExcluding": "0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFF6A0FB-8392-4A7B-93DE-CD6398016C8B",
              "versionEndExcluding": "0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BCF873-1788-4670-A29F-72A464C77228",
              "versionEndExcluding": "0054",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E95BD4-13B0-4687-89F2-0CFA0366E9FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Un control de acceso inapropiado en el firmware para Intel(R) NUC(R) puede permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios por medio de un acceso local."
    }
  ],
  "id": "CVE-2019-14610",
  "lastModified": "2024-11-21T04:27:02.127",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-12-16T20:15:15.337",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2019-12-16 20:15
Modified
2024-11-21 04:27
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc_8_mainstream_game_kit_firmware *
intel nuc_8_mainstream_game_kit -
intel nuc_8_mainstream_game_mini_computer_firmware *
intel nuc_8_mainstream_game_mini_computer -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i3cysm_firmware *
intel nuc8i3cysm -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel stk2m3w64cc_firmware *
intel stk2m3w64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc6i5syh_firmware *
intel nuc6i5syh -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel cd1m3128mk_firmware *
intel cd1m3128mk -
intel cd1iv128mk_firmware *
intel cd1iv128mk -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel d34010wyb_firmware *
intel d34010wyb -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBFF7E0-4BC0-4E68-82A5-B278ECEB1122",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "365D716A-73F7-4F20-A4F5-0FE53E08E014",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B5CC5A-30B0-4AA7-805E-05F70C39E0B9",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC228AB-19E6-4C1E-82D7-113CB02CB9B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03D6FF33-3832-40A1-8E5F-900D3C32B350",
              "versionEndExcluding": "0077",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF2A976-4171-43C1-8B3E-1985B98F8AD2",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D658393-6F10-4883-804B-A2B84625958D",
              "versionEndExcluding": "0043",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70041B5F-C057-49F8-B949-B5F690680893",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A654417-AF25-4BCC-8965-ADA5B3B9C060",
              "versionEndExcluding": "0059",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C41138-573B-43DE-83F6-C760ECF6D6E5",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F987C74-0FF8-48FD-AECC-5F90AB02A968",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E04AAD-D2D3-4973-8C26-14C2A77084B3",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF27C3F-0F41-4DAE-8972-52CDB0E0BC57",
              "versionEndExcluding": "0061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13F6B0D-1DF1-493D-82F6-F88442807E67",
              "versionEndExcluding": "0062",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7C10A5-D65B-4AF1-B200-BFC6B5E5BFE0",
              "versionEndExcluding": "0066",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6ED9789-5524-40BC-A5B6-9E90AD7CDAC3",
              "versionEndExcluding": "0072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EFD543E-DD44-403D-A81F-9F7668F9A473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99394CE6-5D41-4856-BE47-AAE11D2845BB",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43FAC38A-198A-445B-BBEF-7F5C733AD912",
              "versionEndExcluding": "0058",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9290D1EF-ADCC-428B-A6B6-DD204A660A32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17FAF1D5-59AD-478D-A21B-1FDFD35AC9F3",
              "versionEndExcluding": "0038",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A488AFAB-566C-44EF-B211-38F87EF2164D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6425331-88CE-42C6-9C8E-9CAFB16A25E4",
              "versionEndExcluding": "0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFF6A0FB-8392-4A7B-93DE-CD6398016C8B",
              "versionEndExcluding": "0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BCF873-1788-4670-A29F-72A464C77228",
              "versionEndExcluding": "0054",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E95BD4-13B0-4687-89F2-0CFA0366E9FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Una escritura fuera de l\u00edmites en el firmware para Intel(R) NUC(R) puede permitir a un usuario privilegiado habilitar una escalada de privilegios por medio de un acceso local."
    }
  ],
  "id": "CVE-2019-14612",
  "lastModified": "2024-11-21T04:27:02.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-12-16T20:15:15.477",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2019-12-16 20:15
Modified
2024-11-21 04:27
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc_8_mainstream_game_kit_firmware *
intel nuc_8_mainstream_game_kit -
intel nuc_8_mainstream_game_mini_computer_firmware *
intel nuc_8_mainstream_game_mini_computer -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i3cysm_firmware *
intel nuc8i3cysm -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel stk2m3w64cc_firmware *
intel stk2m3w64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc6i5syh_firmware *
intel nuc6i5syh -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel cd1m3128mk_firmware *
intel cd1m3128mk -
intel cd1iv128mk_firmware *
intel cd1iv128mk -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel d34010wyb_firmware *
intel d34010wyb -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBFF7E0-4BC0-4E68-82A5-B278ECEB1122",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "365D716A-73F7-4F20-A4F5-0FE53E08E014",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B5CC5A-30B0-4AA7-805E-05F70C39E0B9",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC228AB-19E6-4C1E-82D7-113CB02CB9B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03D6FF33-3832-40A1-8E5F-900D3C32B350",
              "versionEndExcluding": "0077",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF2A976-4171-43C1-8B3E-1985B98F8AD2",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D658393-6F10-4883-804B-A2B84625958D",
              "versionEndExcluding": "0043",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70041B5F-C057-49F8-B949-B5F690680893",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A654417-AF25-4BCC-8965-ADA5B3B9C060",
              "versionEndExcluding": "0059",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C41138-573B-43DE-83F6-C760ECF6D6E5",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F987C74-0FF8-48FD-AECC-5F90AB02A968",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E04AAD-D2D3-4973-8C26-14C2A77084B3",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF27C3F-0F41-4DAE-8972-52CDB0E0BC57",
              "versionEndExcluding": "0061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13F6B0D-1DF1-493D-82F6-F88442807E67",
              "versionEndExcluding": "0062",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7C10A5-D65B-4AF1-B200-BFC6B5E5BFE0",
              "versionEndExcluding": "0066",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6ED9789-5524-40BC-A5B6-9E90AD7CDAC3",
              "versionEndExcluding": "0072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EFD543E-DD44-403D-A81F-9F7668F9A473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99394CE6-5D41-4856-BE47-AAE11D2845BB",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43FAC38A-198A-445B-BBEF-7F5C733AD912",
              "versionEndExcluding": "0058",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9290D1EF-ADCC-428B-A6B6-DD204A660A32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17FAF1D5-59AD-478D-A21B-1FDFD35AC9F3",
              "versionEndExcluding": "0038",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A488AFAB-566C-44EF-B211-38F87EF2164D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6425331-88CE-42C6-9C8E-9CAFB16A25E4",
              "versionEndExcluding": "0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFF6A0FB-8392-4A7B-93DE-CD6398016C8B",
              "versionEndExcluding": "0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BCF873-1788-4670-A29F-72A464C77228",
              "versionEndExcluding": "0054",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E95BD4-13B0-4687-89F2-0CFA0366E9FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de enteros en el firmware para Intel(R) NUC(R), puede permitir a un usuario privilegiado habilitar potencialmente una escalada de privilegios por medio de un acceso local."
    }
  ],
  "id": "CVE-2019-14611",
  "lastModified": "2024-11-21T04:27:02.317",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-12-16T20:15:15.413",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2020-08-13 03:15
Modified
2024-11-21 05:39
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc8i7behga_firmware *
intel nuc8i7behga -
intel nuc8i7bekqa_firmware *
intel nuc8i7bekqa -
intel nuc8i3behfa_firmware *
intel nuc8i3behfa -
intel nuc8i5behfa_firmware *
intel nuc8i5behfa -
intel nuc8i5bekpa_firmware *
intel nuc8i5bekpa -
intel nuc8i3beh_firmware *
intel nuc8i3beh -
intel nuc8i3behs_firmware *
intel nuc8i3behs -
intel nuc8i3bek_firmware *
intel nuc8i3bek -
intel nuc8i5beh_firmware *
intel nuc8i5beh -
intel nuc8i5behs_firmware *
intel nuc8i5behs -
intel nuc8i5bek_firmware *
intel nuc8i5bek -
intel nuc8i7beh_firmware *
intel nuc8i7beh -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1c32gk_firmware *
intel cd1c32gk -
intel cd1c64gk_firmware *
intel cd1c64gk -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i7hnkqc_firmware *
intel nuc8i7hnkqc -
intel nuc8i7hvkva_firmware *
intel nuc8i7hvkva -
intel nuc8i7hvkvaw_firmware *
intel nuc8i7hvkvaw -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc8i7hvk_firmware *
intel nuc8i7hvk -
intel nuc7i7dnbe_firmware *
intel nuc7i7dnbe -
intel nuc7i7dnhe_firmware *
intel nuc7i7dnhe -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnkpc_firmware *
intel nuc7i5dnkpc -
intel nuc7i5dnbe_firmware *
intel nuc7i5dnbe -
intel nuc7i5dnhe_firmware *
intel nuc7i5dnhe -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhnc_firmware *
intel nuc7i3dnhnc -
intel nuc7i3dnktc_firmware *
intel nuc7i3dnktc -
intel nuc7i3dnbe_firmware *
intel nuc7i3dnbe -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel nuc7i3dnke_firmware *
intel nuc7i3dnke -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc7cjysal_firmware *
intel nuc7cjysal -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel nuc7pjyh_firmware *
intel nuc7pjyh -
intel nuc7i7bnhxg_firmware *
intel nuc7i7bnhxg -
intel nuc7i7bnkq_firmware *
intel nuc7i7bnkq -
intel nuc7i3bnhxf_firmware *
intel nuc7i3bnhxf -
intel nuc7i5bnhxf_firmware *
intel nuc7i5bnhxf -
intel nuc7i5bnkp_firmware *
intel nuc7i5bnkp -
intel nuc7i3bnb_firmware *
intel nuc7i3bnb -
intel nuc7i5bnb_firmware *
intel nuc7i5bnb -
intel nuc7i7bnb_firmware *
intel nuc7i7bnb -
intel nuc7i3bnh_firmware *
intel nuc7i3bnh -
intel nuc7i3bnhx1_firmware *
intel nuc7i3bnhx1 -
intel nuc7i3bnk_firmware *
intel nuc7i3bnk -
intel nuc7i5bnh_firmware *
intel nuc7i5bnh -
intel nuc7i5bnhx1_firmware *
intel nuc7i5bnhx1 -
intel nuc7i5bnk_firmware *
intel nuc7i5bnk -
intel nuc7i7bnh_firmware *
intel nuc7i7bnh -
intel nuc7i7bnhx1_firmware *
intel nuc7i7bnhx1 -
intel nuc6cayh_firmware *
intel nuc6cayh -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel de3815tykhe_firmware *
intel de3815tykhe -
intel de3815tybe_firmware *
intel de3815tybe -
intel de3815tykhe_firmware *
intel de3815tykhe -
intel nuc5cpyh_firmware *
intel nuc5cpyh -
intel nuc5pgyh_firmware *
intel nuc5pgyh -
intel nuc5ppyh_firmware *
intel nuc5ppyh -
intel nuc5i3ryh_firmware *
intel nuc5i3ryh -
intel nuc5i3ryhs_firmware *
intel nuc5i3ryhs -
intel nuc5i3ryhsn_firmware *
intel nuc5i3ryhsn -
intel nuc5i3ryk_firmware *
intel nuc5i3ryk -
intel nuc5i5ryh_firmware *
intel nuc5i5ryh -
intel nuc5i5ryhs_firmware *
intel nuc5i5ryhs -
intel nuc5i5ryk_firmware *
intel nuc5i5ryk -
intel nuc5i7ryh_firmware *
intel nuc5i7ryh -
intel nuc5i5mybe_firmware *
intel nuc5i5mybe -
intel nuc5i5myhe_firmware *
intel nuc5i5myhe -
intel nuc5i3mybe_firmware *
intel nuc5i3mybe -
intel nuc5i3myhe_firmware *
intel nuc5i3myhe -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7behga_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EAB5A96-2EC2-4957-9D37-9CA1828F3C95",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7behga:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F6F13C5-EE0D-4FB1-8194-6D6A86A22A1C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bekqa_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17A0D8FA-081A-4DC2-86D5-AD337EC0D48C",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bekqa:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E9CB3A4-2618-43BE-A526-8ABF8ECF25B9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3behfa_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9F9707A-46FA-4B9B-9F89-43DF52513DE1",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3behfa:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75411B13-00A9-4C46-BD3C-6064A99AEAEF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5behfa_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B435E10E-5457-4356-AFBC-F5BFECA95072",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5behfa:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03ED8843-4EC1-4BC5-94B9-1D4AEEE31612",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5bekpa_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D36398C1-F19F-4644-B35C-7E4F9A0C2317",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5bekpa:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BBE1E93-5491-4F25-9014-098E9BD28B1B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3beh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F9C0671-7B50-494A-B73C-36234604EE29",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3beh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D3826E8-D411-4F95-B0F8-B97C89DD3831",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3behs_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76C17A79-AF26-4817-B585-F757EFE0FF99",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3behs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D06F844C-5ADA-4933-B5A9-EB610D9527E4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "77D74519-63B8-4881-A177-1BFC2936BF56",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B79E147-6B97-474B-BDC3-6E30AA7B5EB6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5beh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E6F69CD-F6E8-4997-97ED-37A6F32823B3",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5beh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23D36FA4-1963-41E5-A53A-9F47FCAEE4A9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5behs_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F055088-B170-4C09-B94D-E45A1E56E530",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5behs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFDC4C7F-48A9-4A8C-ACB1-D526CD5FC628",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i5bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8ACF50A2-9DA2-444A-9B3B-49F428319C42",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i5bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8037BB98-93BE-43F8-9A0A-46E306D1C1FB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7beh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB132AA5-E502-4C45-B8F4-B0978CBC6CC5",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7beh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B4936EA-A614-4A59-8792-227067400509",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA2BAC2D-5306-4F52-848C-169B37D6B019",
              "versionEndExcluding": "becfl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1c32gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3F69BC5-DD51-4C65-AB37-392CFB559D28",
              "versionEndExcluding": "gkaplcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1c32gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA9579A8-7459-4A5C-B3E5-AD8B67EE24AC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1c64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "07802810-F126-475D-9BB4-0EAAD5F8D3E8",
              "versionEndExcluding": "gkaplcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1c64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6AD788F-7F9A-4E6A-827F-69B7F41501C6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "79C0489D-7098-4962-9E5A-81488CF6BB2C",
              "versionEndExcluding": "gkaplcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnkqc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF9C3B2-75AE-42A7-A99D-0D04905D8D20",
              "versionEndExcluding": "hnkbli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnkqc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00149C0A-A05B-40D3-8DFD-0867B2A71436",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvkva_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4FC6977-4F5F-44AE-B32A-90346DE22824",
              "versionEndExcluding": "hnkbli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvkva:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "81544988-95CC-4CCF-938C-27A3DA94C479",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvkvaw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0245AD28-8648-44C6-A509-879C26390F48",
              "versionEndExcluding": "hnkbli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvkvaw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B53EC7FA-8BB8-4021-9B56-75B2CCD4F2E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F641932A-C3BD-4BB8-938A-C8D131B21897",
              "versionEndExcluding": "hnkbli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hvk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "70F611F6-E768-4E05-AAA0-BCC3FCD56583",
              "versionEndExcluding": "hnkbli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hvk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA600CE0-C6A5-4844-B8A4-17CA897060BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnbe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "40AB66B5-BC0D-4DAE-B07F-01C7BD7E5980",
              "versionEndExcluding": "dnkbli7v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnbe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9491896A-6D0D-4A36-BD86-C7D3F9D67BC9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FAEB9DF-2A40-4DB7-85F7-566B34E46288",
              "versionEndExcluding": "dnkbli7v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "10457F25-B045-4DFE-99A3-5BADD314DCC5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "89CD14CC-E208-47F3-A34C-CD67DA8B022A",
              "versionEndExcluding": "dnkbli7v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnkpc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "554030FC-23C9-434B-AA75-C06C06963C2D",
              "versionEndExcluding": "dnkbli5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnkpc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFA1D3DB-A76E-40B3-80D8-CB1A8574E24D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnbe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CD9B011-D093-4AC4-ABA7-489EBE935EFF",
              "versionEndExcluding": "dnkbli5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnbe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "117A5BF7-8CE6-4E7E-A303-BC36CB92E80D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BA3562C-D4AD-4BF9-9584-16AE2654F365",
              "versionEndExcluding": "dnkbli5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A42BE9DE-6C99-498B-BE62-94D64E2C5E7B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "015413F7-390F-4A78-B249-B3C4798E9972",
              "versionEndExcluding": "dnkbli5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhnc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "51061A49-BC7C-44F0-941C-B925FB929C7D",
              "versionEndExcluding": "dnkbli30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhnc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A98AB826-2534-464D-BAE2-00CBF29C8A6A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnktc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A54AFCD-6348-4377-BF04-41A6A1AEC039",
              "versionEndExcluding": "dnkbli30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnktc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C20EF764-A1E5-4A14-9050-0FDB7114B149",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnbe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B77D1C2A-0F97-4C9F-9806-371EC10456B3",
              "versionEndExcluding": "dnkbli30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnbe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "014A2068-4A1E-4621-A3F9-6B69A3DE299C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC734872-25A9-46E2-A296-630CD9BCCA46",
              "versionEndExcluding": "dnkbli30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B06F28A-ADD4-428B-862E-9E08590B672B",
              "versionEndExcluding": "dnkbli30.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F1FA7AA-CDFE-49B9-8834-052AD3CFCC83",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADA590A8-6765-4C76-BDDF-9729F62FD34A",
              "versionEndExcluding": "ccsklm5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F255E3E3-3FF5-472C-8134-E0EB16137857",
              "versionEndExcluding": "kyskli70.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjysal_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDE5F8D3-872B-4614-BE85-28AE47A80347",
              "versionEndExcluding": "jyglkcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjysal:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7883EA-D255-4611-A14B-2122A5873747",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8BF95C5-2674-4346-96AF-FA62B50EB26A",
              "versionEndExcluding": "jyglkcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7pjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3BEDA6B-DCC5-44EC-A0BF-4697C8DB86E4",
              "versionEndExcluding": "jyglkcpx.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7pjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "458E0FF7-D70D-4B28-875F-22E485E69339",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnhxg_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "023E6FFA-4F0D-4B12-9E13-4C5C2FB09DD2",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnhxg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4119829C-825C-4CFF-83BB-DF5CC827EFDC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnkq_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "117CD08F-5F0C-4589-8412-D20ED9F6B22F",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnkq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "825CA7B5-DA89-46F1-9B51-A7BADCEADE7D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnhxf_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "743E5F4A-EDA1-4033-9E3D-5A04A381668A",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnhxf:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDC0639D-58B9-49C7-BB2E-FC56BFB32738",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnhxf_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "511D00AE-7EF7-4262-B04E-D672AE59D8BF",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnhxf:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D396814A-3CD4-427B-8A95-AB199245DDCB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnkp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AFA92FF-B79B-4C27-B01F-1CAA913AA8F2",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnkp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "003349A9-0009-49AA-B7A4-AF27404985E5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F4E3A1B-001E-42CD-B538-FC4EC29F9D1E",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "50642504-4872-47CF-B5ED-921620C600A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E39F2C2D-BAF4-42BE-9A92-0D66B9086923",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "432B9A10-964F-45B4-A832-C8C5C325DFEE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B8A1887-54BD-43AC-96F1-1052C074A0B6",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBD43D6D-8D38-4DDD-AFA5-488E2D86F0DA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "140EF411-7897-443B-9FC2-3C24E2919E20",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC5EC4E6-B529-48DC-9251-73633807E4A7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnhx1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "33D8636B-7AE7-4CF3-B499-9686DD994919",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnhx1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "91E674F4-08FE-44A3-B834-9FE9A0A7D382",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3bnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B89DA39D-C5A5-484E-81C1-7C96393CDE6F",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3bnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A810CE8E-3B2C-458D-BAE4-BA3AEC4FA5CA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DFEFA0C-654A-41D6-952E-2DA5055EE504",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA8FFEF7-5140-44F6-91CD-B9468F20692F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnhx1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B7F650F-CB9A-4D28-9D96-25E6678BE2A8",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnhx1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02701C54-557F-4346-BBF2-652793A5DA6D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5bnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F63538F2-F8B4-4E73-BE48-F583DF666F76",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5bnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBF91B19-0FA1-4CE8-B729-A09612466725",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C3F6FDF-9F83-4426-A34B-09511703F1C1",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACBE1C0D-69EF-45B5-9E70-C4DBD0A401BF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7bnhx1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8124BA42-CC25-4E91-A533-FD569075497A",
              "versionEndExcluding": "bnkbl357.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7bnhx1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20977314-4E07-4793-B1ED-84F89B56E58B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cayh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD8BF9E5-3E0A-4DF7-9EB6-E985DD72EFBB",
              "versionEndExcluding": "ayaplcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cayh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6865AF64-360C-4C67-9440-E16D6DEDA949",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B15821F2-A53D-4E0E-8000-CB7AD03685D4",
              "versionEndExcluding": "ayaplcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D37AC0D-C43D-4E76-9124-ED5AAA1C4134",
              "versionEndExcluding": "tybyt20h.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tykhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6A14F16-018E-460B-92C3-E4899BB5485E",
              "versionEndExcluding": "tybyt20h.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tykhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D1E585D-3254-45A2-8602-5D6FE535A89F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8601B9FE-44B0-4304-8E14-1E3CF0755693",
              "versionEndExcluding": "tybyt10h.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tykhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAAD7266-1ED4-4C54-BEA7-6C69AEADBBB9",
              "versionEndExcluding": "tybyt10h.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tykhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D1E585D-3254-45A2-8602-5D6FE535A89F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5cpyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3630DA4-1A85-4344-A67E-ED5D655DD5AB",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5cpyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AEC08E1-22C7-4C2F-AB3E-1A65C09B1CFB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5pgyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2728ED6-57FC-4310-9975-6D29E249DB6F",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5pgyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA76A826-FA4E-4B1E-8B24-77799D3727DB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5ppyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "92E3F17F-CA2D-4843-9F3F-45D4A7D7FD59",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5ppyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "83C621C2-6FA8-427F-BE2C-2DB6B5A910E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3ryh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B8399D8-DB01-488D-8471-B197B8AA5BD7",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3ryh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "798A25B3-08B5-4E7C-92FB-4473385A328F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3ryhs_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AAA833B-4872-4D73-B6FB-52B8D1EF49D0",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3ryhs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "61B27796-699C-4623-B661-3AC66BCFD539",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3ryhsn_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "80174AEF-76C0-48AF-A80E-50E2751704C8",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3ryhsn:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB6E62C0-F87B-4EC6-9FC0-1A47B5935619",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3ryk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "73424B79-2287-48D3-81B8-486935C4CD1C",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3ryk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "19ABC970-C58E-4C43-B6A6-732F22B30915",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i5ryh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38E6B1C2-F65E-424E-8780-B94891280602",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5ryh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C58EF86-8D1E-4365-BA8F-8FD84D6FA9D1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i5ryhs_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "88AFF33B-2034-4FAA-B39B-01579923694B",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5ryhs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA20C8DE-7236-4B25-B7B6-DB51AA79A1A6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i5ryk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FE67B51-3E36-4980-8813-4625300631D9",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5ryk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "52844DDE-2F80-4EEF-8E77-ADD67F3321A9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i7ryh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA9B2E97-F86D-4F25-8F83-86DB7268FB25",
              "versionEndExcluding": "pybswcel.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i7ryh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECE0658C-42A6-4B64-9147-5819E0204E2C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i5mybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F19F039-3BF7-4E18-B61E-4B673E6116F0",
              "versionEndExcluding": "mybdwi5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5mybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A07DD188-EA0C-4BA3-9C9E-D5A146B493A5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i5myhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "164A3419-49D7-41D6-B84B-E235255C23F5",
              "versionEndExcluding": "mybdwi5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i5myhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1433C6F-E0FB-4839-BA69-F63F825C2166",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3mybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA8A0597-CBA0-4376-B409-B17CD0107D89",
              "versionEndExcluding": "mybdwi5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3mybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3371249-3123-49D8-80C1-A2EFFF1FC859",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc5i3myhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "59F94513-A686-4243-B50D-A935A8C682E8",
              "versionEndExcluding": "mybdwi5v.86a",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc5i3myhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D6DD54A-FFDB-4C62-89E6-5D725382E5D8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Una comprobaci\u00f3n de entrada inapropiada en el firmware para Intel\u00ae NUCs puede permitir a un usuario privilegiado habilitar potencialmente una escalada de privilegios por medio de un acceso local"
    }
  ],
  "id": "CVE-2020-8742",
  "lastModified": "2024-11-21T05:39:21.850",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-08-13T03:15:16.523",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2017-04-03 21:59
Modified
2025-04-20 01:37
Severity ?
3.9 (Low) - CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Summary
The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.
References
secure@intel.comhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-frVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073&languageid=en-frVendor Advisory
Impacted products
Vendor Product Version
intel stk2mv64cc_bios *
intel stk2mv64cc -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_bios:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B78291F6-734D-45E1-A06D-64D7B01AFD54",
              "versionEndIncluding": "ccsklm5v.86a.0046.2017.0105.1608",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information."
    },
    {
      "lang": "es",
      "value": "Los sistemas BIOS en Intel Compute Stick basados en los procesadores 6th Gen Intel Core anteriores a la versi\u00f3n CC047 puede permitir a un atacante con acceso f\u00edsico al sistema obtener acceso a informaci\u00f3n personal."
    }
  ],
  "id": "CVE-2017-5684",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "NONE",
          "baseScore": 3.9,
          "baseSeverity": "LOW",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 0.3,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-04-03T21:59:00.187",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2019-12-16 20:15
Modified
2024-11-21 04:27
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
intel nuc_8_mainstream_game_kit_firmware *
intel nuc_8_mainstream_game_kit -
intel nuc_8_mainstream_game_mini_computer_firmware *
intel nuc_8_mainstream_game_mini_computer -
intel nuc8i7bek_firmware *
intel nuc8i7bek -
intel cd1p64gk_firmware *
intel cd1p64gk -
intel nuc8i3cysm_firmware *
intel nuc8i3cysm -
intel nuc8i7hnk_firmware *
intel nuc8i7hnk -
intel nuc7i7dnke_firmware *
intel nuc7i7dnke -
intel nuc7i5dnke_firmware *
intel nuc7i5dnke -
intel nuc7i3dnhe_firmware *
intel nuc7i3dnhe -
intel stk2mv64cc_firmware *
intel stk2mv64cc -
intel stk2m3w64cc_firmware *
intel stk2m3w64cc -
intel nuc6i7kyk_firmware *
intel nuc6i7kyk -
intel nuc6i5syh_firmware *
intel nuc6i5syh -
intel nuc7cjyh_firmware *
intel nuc7cjyh -
intel cd1m3128mk_firmware *
intel cd1m3128mk -
intel cd1iv128mk_firmware *
intel cd1iv128mk -
intel nuc6cays_firmware *
intel nuc6cays -
intel de3815tybe_firmware *
intel de3815tybe -
intel d34010wyb_firmware *
intel d34010wyb -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBFF7E0-4BC0-4E68-82A5-B278ECEB1122",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "365D716A-73F7-4F20-A4F5-0FE53E08E014",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B5CC5A-30B0-4AA7-805E-05F70C39E0B9",
              "versionEndExcluding": "0036",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC228AB-19E6-4C1E-82D7-113CB02CB9B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "03D6FF33-3832-40A1-8E5F-900D3C32B350",
              "versionEndExcluding": "0077",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03975E45-3940-404E-94FA-61C37DD6DA32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF2A976-4171-43C1-8B3E-1985B98F8AD2",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D70643B-FE67-40CA-B63F-825E78D7D670",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D658393-6F10-4883-804B-A2B84625958D",
              "versionEndExcluding": "0043",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "70041B5F-C057-49F8-B949-B5F690680893",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A654417-AF25-4BCC-8965-ADA5B3B9C060",
              "versionEndExcluding": "0059",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57B1FC17-80E8-432B-8757-9522D6433800",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C41138-573B-43DE-83F6-C760ECF6D6E5",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDBA0B8-C076-43B1-AB5A-509DCDCB2932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F987C74-0FF8-48FD-AECC-5F90AB02A968",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CCB3FE-E248-4765-B630-5AC815D8C1F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E04AAD-D2D3-4973-8C26-14C2A77084B3",
              "versionEndExcluding": "0067",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD25295-C0A4-45CD-9EA0-0C4594A08076",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FF27C3F-0F41-4DAE-8972-52CDB0E0BC57",
              "versionEndExcluding": "0061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13F6B0D-1DF1-493D-82F6-F88442807E67",
              "versionEndExcluding": "0062",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D7C10A5-D65B-4AF1-B200-BFC6B5E5BFE0",
              "versionEndExcluding": "0066",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC196D3E-062A-4301-BAA8-51FAF153F2EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6ED9789-5524-40BC-A5B6-9E90AD7CDAC3",
              "versionEndExcluding": "0072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EFD543E-DD44-403D-A81F-9F7668F9A473",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99394CE6-5D41-4856-BE47-AAE11D2845BB",
              "versionEndExcluding": "0053",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64DA446C-B6D3-44AA-A5DE-ADDB6D879010",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43FAC38A-198A-445B-BBEF-7F5C733AD912",
              "versionEndExcluding": "0058",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9290D1EF-ADCC-428B-A6B6-DD204A660A32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17FAF1D5-59AD-478D-A21B-1FDFD35AC9F3",
              "versionEndExcluding": "0038",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A488AFAB-566C-44EF-B211-38F87EF2164D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6425331-88CE-42C6-9C8E-9CAFB16A25E4",
              "versionEndExcluding": "0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8285608B-66BB-47F7-AD2F-F9FC6ECB2FE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFF6A0FB-8392-4A7B-93DE-CD6398016C8B",
              "versionEndExcluding": "0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A0221B0-3D61-45A2-AF5D-9D4E947C1E16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BCF873-1788-4670-A29F-72A464C77228",
              "versionEndExcluding": "0054",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E95BD4-13B0-4687-89F2-0CFA0366E9FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Una comprobaci\u00f3n de entrada inapropiada en el firmware para Intel(R) NUC(R), puede permitir a un usuario con privilegios habilitar una escalada de privilegios por medio de un acceso local."
    }
  ],
  "id": "CVE-2019-14609",
  "lastModified": "2024-11-21T04:27:01.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-12-16T20:15:15.290",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2017-5691 (GCVE-0-2017-5691)
Vulnerability from cvelistv5
Published
2017-07-26 15:00
Modified
2024-09-16 17:58
Severity ?
CWE
  • Elevation of Privilege
Summary
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
References
Impacted products
Vendor Product Version
Intel Corporation 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families. Version: 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families.
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-15184"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families.",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families."
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-15T19:57:01",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-15184"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2017-07-25T00:00:00",
          "ID": "CVE-2017-5691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families.",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076\u0026languageid=en-fr"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-15184",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-15184"
            },
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesb3p03767en_us"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2017-5691",
    "datePublished": "2017-07-26T15:00:00Z",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-09-16T17:58:24.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14612 (GCVE-0-2019-14612)
Vulnerability from cvelistv5
Published
2019-12-16 19:11
Modified
2024-08-05 00:19
Severity ?
CWE
  • Escalation of Privilege
Summary
Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC(R) Version: See References
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.370Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC(R)",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See References"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-16T19:11:55",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14612",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC(R)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See References"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14612",
    "datePublished": "2019-12-16T19:11:55",
    "dateReserved": "2019-08-03T00:00:00",
    "dateUpdated": "2024-08-05T00:19:41.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8742 (GCVE-0-2020-8742)
Vulnerability from cvelistv5
Published
2020-08-13 02:15
Modified
2024-08-04 10:12
Severity ?
CWE
  • Escalation of Privilege
Summary
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUCs Advisory Version: See provided reference
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:12:09.646Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUCs Advisory",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See provided reference"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-13T02:15:45",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-8742",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUCs Advisory",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See provided reference"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00392.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-8742",
    "datePublished": "2020-08-13T02:15:45",
    "dateReserved": "2020-02-06T00:00:00",
    "dateUpdated": "2024-08-04T10:12:09.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14609 (GCVE-0-2019-14609)
Vulnerability from cvelistv5
Published
2019-12-16 19:11
Modified
2024-08-05 00:19
Severity ?
CWE
  • Escalation of Privilege
Summary
Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC(R) Version: See References
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC(R)",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See References"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-16T19:11:36",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14609",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC(R)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See References"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14609",
    "datePublished": "2019-12-16T19:11:36",
    "dateReserved": "2019-08-03T00:00:00",
    "dateUpdated": "2024-08-05T00:19:41.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14610 (GCVE-0-2019-14610)
Vulnerability from cvelistv5
Published
2019-12-16 19:11
Modified
2024-08-05 00:19
Severity ?
CWE
  • Escalation of Privilege
Summary
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC(R) Version: See References
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC(R)",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See References"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-16T19:11:14",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14610",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC(R)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See References"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14610",
    "datePublished": "2019-12-16T19:11:14",
    "dateReserved": "2019-08-03T00:00:00",
    "dateUpdated": "2024-08-05T00:19:41.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5684 (GCVE-0-2017-5684)
Vulnerability from cvelistv5
Published
2017-04-03 21:00
Modified
2024-08-05 15:11
Severity ?
CWE
  • Information Disclosure
Summary
The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information.
References
Impacted products
Vendor Product Version
Intel Intel Compute Stick STK2MV64CC Version: Before CC047
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:47.409Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel Compute Stick STK2MV64CC",
          "vendor": "Intel",
          "versions": [
            {
              "status": "affected",
              "version": "Before CC047"
            }
          ]
        }
      ],
      "datePublic": "2017-04-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-04-03T20:57:01",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2017-5684",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel Compute Stick STK2MV64CC",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Before CC047"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00073\u0026languageid=en-fr"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2017-5684",
    "datePublished": "2017-04-03T21:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-05T15:11:47.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14611 (GCVE-0-2019-14611)
Vulnerability from cvelistv5
Published
2019-12-16 19:11
Modified
2024-08-05 00:19
Severity ?
CWE
  • Escalation of Privilege
Summary
Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC(R) Version: See References
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.373Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC(R)",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See References"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-16T19:11:44",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14611",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC(R)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See References"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14611",
    "datePublished": "2019-12-16T19:11:44",
    "dateReserved": "2019-08-03T00:00:00",
    "dateUpdated": "2024-08-05T00:19:41.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14608 (GCVE-0-2019-14608)
Vulnerability from cvelistv5
Published
2019-12-16 19:10
Modified
2024-08-05 00:19
Severity ?
CWE
  • Escalation of Privilege
Summary
Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC(R) Version: See References
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:19:41.376Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) NUC(R)",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See References"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-16T19:10:34",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-14608",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) NUC(R)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See References"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-14608",
    "datePublished": "2019-12-16T19:10:34",
    "dateReserved": "2019-08-03T00:00:00",
    "dateUpdated": "2024-08-05T00:19:41.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-28699 (GCVE-0-2022-28699)
Vulnerability from cvelistv5
Published
2023-05-10 13:16
Modified
2025-01-27 18:09
Severity ?
7.5 (High) - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE
  • escalation of privilege
  • CWE-20 - Improper input validation
Summary
Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
References
Impacted products
Vendor Product Version
n/a Intel(R) NUC BIOS firmware Version: See references
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:03:52.130Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-28699",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-27T17:28:30.890717Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-27T18:09:29.351Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) NUC BIOS firmware",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en"
            },
            {
              "cweId": "CWE-20",
              "description": "Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-10T13:16:46.127Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html",
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2022-28699",
    "datePublished": "2023-05-10T13:16:46.127Z",
    "dateReserved": "2022-06-09T05:41:11.430Z",
    "dateUpdated": "2025-01-27T18:09:29.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8103 (GCVE-0-2016-8103)
Vulnerability from cvelistv5
Published
2016-12-08 17:00
Modified
2024-08-06 02:13
Severity ?
CWE
  • Elevated Privilege
Summary
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform.
References
Impacted products
Vendor Product Version
Intel NUC Kits Version: All
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:13:21.682Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95012",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "NUC Kits",
          "vendor": "Intel",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ],
      "datePublic": "2016-10-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevated Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-22T10:57:01",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "95012",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2016-8103",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "NUC Kits",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevated Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95012",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95012"
            },
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057\u0026languageid=en-fr"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2016-8103",
    "datePublished": "2016-12-08T17:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T02:13:21.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}