CVE-2019-14610
HIGHCVSS 7.8/10EPSS 0.34%
Last modified
CVE-2019-14610 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Nuc 8 Mainstream Game Kit Firmware | < 0036 |
| Intel | Nuc 8 Mainstream Game Mini Computer Firmware | < 0036 |
| Intel | Nuc8i7bek Firmware | < 0077 |
| Intel | Cd1p64gk Firmware | < 0053 |
| Intel | Nuc8i3cysm Firmware | < 0043 |
| Intel | Nuc8i7hnk Firmware | < 0059 |
| Intel | Nuc7i7dnke Firmware | < 0067 |
| Intel | Nuc7i5dnke Firmware | < 0067 |
| Intel | Nuc7i3dnhe Firmware | < 0067 |
| Intel | Stk2mv64cc Firmware | < 0061 |
| Intel | Stk2m3w64cc Firmware | < 0062 |
| Intel | Nuc6i7kyk Firmware | < 0066 |
| Intel | Nuc6i5syh Firmware | < 0072 |
| Intel | Nuc7cjyh Firmware | < 0053 |
| Intel | Cd1m3128mk Firmware | < 0058 |
| Intel | Cd1iv128mk Firmware | < 0038 |
| Intel | Nuc6cays Firmware | < 0064 |
| Intel | De3815tybe Firmware | < 0024 |
| Intel | D34010wyb Firmware | < 0054 |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14610?
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2019-14610?
CVE-2019-14610 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2019-14610?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14605Improper permissions in the installer for the Intel(R) SCS P…7.8
- CVE-2019-14606Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-14607Improper conditions check in multiple Intel® Processors may …5.3
- CVE-2019-14608Improper buffer restrictions in firmware for Intel(R) NUC(R)…7.8
- CVE-2019-14609Improper input validation in firmware for Intel(R) NUC(R) ma…6.7
- CVE-2019-1461A denial of service vulnerability exists in Microsoft Word s…6.5
- CVE-2019-14611Integer overflow in firmware for Intel(R) NUC(R) may allow a…6.7
- CVE-2019-14612Out of bounds write in firmware for Intel(R) NUC(R) may allo…6.7
- CVE-2019-14613Improper access control in driver for Intel(R) VTune(TM) Amp…7.8
- CVE-2019-14614Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-14615Insufficient control flow in certain data structures for som…5.5
- CVE-2019-14616Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2019-14610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST