Improper input validation in Intel NUC Firmware
Priority LOW 30CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Why it matters now
EPSS 0.00392 33rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) NUC Firmware | Please see reference document. | — | No fix listed | CNA |
- Intel(R) NUC Firmware Vendor— Affected Please see reference document. Fixed in — No fix listed CNA
CPE configurations NVD · 42
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:nuc_kit_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_d34010wyx:*:*:*:*:*:*:* | nuc_kit_d34010wyx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_d54250wyx:*:*:*:*:*:*:* | nuc_kit_d54250wyx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_de3815tyb:*:*:*:*:*:*:* | nuc_kit_de3815tyb | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_dn2820fykh:*:*:*:*:*:*:* | nuc_kit_dn2820fykh | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5cpyh:*:*:*:*:*:*:* | nuc_kit_nuc5cpyh | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i3myx:*:*:*:*:*:*:* | nuc_kit_nuc5i3myx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i3ryx:*:*:*:*:*:*:* | nuc_kit_nuc5i3ryx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i5myx:*:*:*:*:*:*:* | nuc_kit_nuc5i5myx | Running on | Intel |
- cpe:2.3:o:intel:nuc_kit_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_d34010wyx:*:*:*:*:*:*:* Versions nuc_kit_d34010wyx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_d54250wyx:*:*:*:*:*:*:* Versions nuc_kit_d54250wyx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_de3815tyb:*:*:*:*:*:*:* Versions nuc_kit_de3815tyb Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_dn2820fykh:*:*:*:*:*:*:* Versions nuc_kit_dn2820fykh Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5cpyh:*:*:*:*:*:*:* Versions nuc_kit_nuc5cpyh Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i3myx:*:*:*:*:*:*:* Versions nuc_kit_nuc5i3myx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i3ryx:*:*:*:*:*:*:* Versions nuc_kit_nuc5i3ryx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i5myx:*:*:*:*:*:*:* Versions nuc_kit_nuc5i5myx Running on ·Intel
Show 32 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i5ryx:*:*:*:*:*:*:* | nuc_kit_nuc5i5ryx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i7ryx:*:*:*:*:*:*:* | nuc_kit_nuc5i7ryx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5pgyh:*:*:*:*:*:*:* | nuc_kit_nuc5pgyh | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5ppyh:*:*:*:*:*:*:* | nuc_kit_nuc5ppyh | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6cayx:*:*:*:*:*:*:* | nuc_kit_nuc6cayx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i3syx:*:*:*:*:*:*:* | nuc_kit_nuc6i3syx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i5syx:*:*:*:*:*:*:* | nuc_kit_nuc6i5syx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i7kyk:*:*:*:*:*:*:* | nuc_kit_nuc6i7kyk | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7cjy:*:*:*:*:*:*:* | nuc_kit_nuc7cjy | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i3bnx:*:*:*:*:*:*:* | nuc_kit_nuc7i3bnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i3dnx:*:*:*:*:*:*:* | nuc_kit_nuc7i3dnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i5bnx:*:*:*:*:*:*:* | nuc_kit_nuc7i5bnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i5dnx:*:*:*:*:*:*:* | nuc_kit_nuc7i5dnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i7bnx:*:*:*:*:*:*:* | nuc_kit_nuc7i7bnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i7dnx:*:*:*:*:*:*:* | nuc_kit_nuc7i7dnx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7pjy:*:*:*:*:*:*:* | nuc_kit_nuc7pjy | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i3cyx:*:*:*:*:*:*:* | nuc_kit_nuc8i3cyx | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i5bex:*:*:*:*:*:*:* | nuc_kit_nuc8i5bex | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7bex:*:*:*:*:*:*:* | nuc_kit_nuc8i7bex | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7hnk:*:*:*:*:*:*:* | nuc_kit_nuc8i7hnk | Running on | Intel |
| cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7hvk:*:*:*:*:*:*:* | nuc_kit_nuc8i7hvk | Running on | Intel |
| cpe:2.3:o:intel:compute_card_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:compute_card_cd1c64gk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_card_cd1iv128mk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_card_cd1m3128mk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_card_cd1p64gk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:compute_stick_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:compute_stick_stck1a32wfc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_stick_stck1a8lfc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_stick_stk2m364cc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_stick_stk2m3w64cc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:compute_stick_stk2mv64cc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i5ryx:*:*:*:*:*:*:* Versions nuc_kit_nuc5i5ryx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5i7ryx:*:*:*:*:*:*:* Versions nuc_kit_nuc5i7ryx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5pgyh:*:*:*:*:*:*:* Versions nuc_kit_nuc5pgyh Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc5ppyh:*:*:*:*:*:*:* Versions nuc_kit_nuc5ppyh Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6cayx:*:*:*:*:*:*:* Versions nuc_kit_nuc6cayx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i3syx:*:*:*:*:*:*:* Versions nuc_kit_nuc6i3syx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i5syx:*:*:*:*:*:*:* Versions nuc_kit_nuc6i5syx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc6i7kyk:*:*:*:*:*:*:* Versions nuc_kit_nuc6i7kyk Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7cjy:*:*:*:*:*:*:* Versions nuc_kit_nuc7cjy Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i3bnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i3bnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i3dnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i3dnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i5bnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i5bnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i5dnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i5dnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i7bnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i7bnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7i7dnx:*:*:*:*:*:*:* Versions nuc_kit_nuc7i7dnx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc7pjy:*:*:*:*:*:*:* Versions nuc_kit_nuc7pjy Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i3cyx:*:*:*:*:*:*:* Versions nuc_kit_nuc8i3cyx Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i5bex:*:*:*:*:*:*:* Versions nuc_kit_nuc8i5bex Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7bex:*:*:*:*:*:*:* Versions nuc_kit_nuc8i7bex Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7hnk:*:*:*:*:*:*:* Versions nuc_kit_nuc8i7hnk Running on ·Intel
- cpe:2.3:h:intel:nuc_kit_nuc8i3bex:nuc_kit_nuc8i7hvk:*:*:*:*:*:*:* Versions nuc_kit_nuc8i7hvk Running on ·Intel
- cpe:2.3:o:intel:compute_card_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:compute_card_cd1c64gk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_card_cd1iv128mk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_card_cd1m3128mk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_card_cd1p64gk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:compute_stick_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:compute_stick_stck1a32wfc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_stick_stck1a8lfc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_stick_stk2m364cc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_stick_stk2m3w64cc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:compute_stick_stk2mv64cc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-11123
- 2026-10-03 Alias added: GHSA-hcr7-m9fh-h4qv
References
More Intel Compute Card Firmware vulnerabilities
- TI-2018-08725 Improper input validation in Intel NUC Kits and Intel Compute Cards CVSS 3.0HIGH 8.2
- TI-2019-08337 Improper input validation in Intel NUC Advisory CVSS 3.0MEDIUM 6.7
- TI-2019-08329 Out-of-bounds read in Intel NUC Firmware CVSS 3.0MEDIUM 6.7
- TI-2019-08328 Improper input validation in Intel NUC Firmware CVSS 3.0MEDIUM 6.7
- TI-2019-08327 Memory corruption in Intel NUC Firmware CVSS 3.0MEDIUM 6.7
- TI-2019-08326 Memory corruption in Intel NUC Firmware CVSS 3.0MEDIUM 6.7
Sources
- CVE-2019-11123 · CVE Program
- CVE-2019-11123 · NVD
- FIRST EPSS
- GHSA-hcr7-m9fh-h4qv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences