A vulnerability has been found in Intel NUC (version now known) and classified as critical. This vulnerability affects some unknown processing. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

The weakness was shared 12/16/2019. This vulnerability was named CVE-2019-14608 since 08/03/2019. The attack needs to be approached locally. Required for exploitation is a single authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 03/12/2024).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-147248, VDB-147247, VDB-147246 and VDB-147245 are related to this item. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Intel

Name

• NUC

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion