Read the docs
TI-2019-10874 Aliases CVE-2019-14609GHSA-r2vc-f934-3977

Improper input validation in Intel NUC

Priority LOW 30CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

Why it matters now

EPSS 0.00336 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel(R) NUC(R)See References—No fix listedCNA
  • Intel(R) NUC(R) Vendor— Affected See References Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:*before 0036VulnerableIntel
cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:*before 0036VulnerableIntel
cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:*before 0077VulnerableIntel
cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:*before 0053VulnerableIntel
cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:*before 0043VulnerableIntel
cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:nuc_8_mainstream_game_kit_firmware:*:*:*:*:*:*:*:* Versions before 0036 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc_8_mainstream_game_kit:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc_8_mainstream_game_mini_computer_firmware:*:*:*:*:*:*:*:* Versions before 0036 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc_8_mainstream_game_mini_computer:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc8i7bek_firmware:*:*:*:*:*:*:*:* Versions before 0077 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc8i7bek:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:cd1p64gk_firmware:*:*:*:*:*:*:*:* Versions before 0053 Vulnerable ·Intel
  • cpe:2.3:h:intel:cd1p64gk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc8i3cysm_firmware:*:*:*:*:*:*:*:* Versions before 0043 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc8i3cysm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:*before 0059VulnerableIntel
cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:*before 0067VulnerableIntel
cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:*before 0067VulnerableIntel
cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:*before 0067VulnerableIntel
cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:*before 0061VulnerableIntel
cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:*before 0062VulnerableIntel
cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:*before 0066VulnerableIntel
cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:*before 0072VulnerableIntel
cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:*before 0053VulnerableIntel
cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:*before 0058VulnerableIntel
cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:*before 0038VulnerableIntel
cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:*before 0064VulnerableIntel
cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:*before 0024VulnerableIntel
cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:*before 0054VulnerableIntel
cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:nuc8i7hnk_firmware:*:*:*:*:*:*:*:* Versions before 0059 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc8i7hnk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc7i7dnke_firmware:*:*:*:*:*:*:*:* Versions before 0067 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc7i7dnke:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc7i5dnke_firmware:*:*:*:*:*:*:*:* Versions before 0067 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc7i5dnke:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc7i3dnhe_firmware:*:*:*:*:*:*:*:* Versions before 0067 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc7i3dnhe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:stk2mv64cc_firmware:*:*:*:*:*:*:*:* Versions before 0061 Vulnerable ·Intel
  • cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:stk2m3w64cc_firmware:*:*:*:*:*:*:*:* Versions before 0062 Vulnerable ·Intel
  • cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc6i7kyk_firmware:*:*:*:*:*:*:*:* Versions before 0066 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc6i7kyk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc6i5syh_firmware:*:*:*:*:*:*:*:* Versions before 0072 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc6i5syh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc7cjyh_firmware:*:*:*:*:*:*:*:* Versions before 0053 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc7cjyh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:cd1m3128mk_firmware:*:*:*:*:*:*:*:* Versions before 0058 Vulnerable ·Intel
  • cpe:2.3:h:intel:cd1m3128mk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:cd1iv128mk_firmware:*:*:*:*:*:*:*:* Versions before 0038 Vulnerable ·Intel
  • cpe:2.3:h:intel:cd1iv128mk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:nuc6cays_firmware:*:*:*:*:*:*:*:* Versions before 0064 Vulnerable ·Intel
  • cpe:2.3:h:intel:nuc6cays:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:de3815tybe_firmware:*:*:*:*:*:*:*:* Versions before 0024 Vulnerable ·Intel
  • cpe:2.3:h:intel:de3815tybe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:d34010wyb_firmware:*:*:*:*:*:*:*:* Versions before 0054 Vulnerable ·Intel
  • cpe:2.3:h:intel:d34010wyb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-14609
  2. 2026-10-03 Alias added: GHSA-r2vc-f934-3977

References

Patch 1

  • TI-2019-10875 Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user… CVSS 3.1HIGH 7.8
  • TI-2019-10873 Memory corruption in Intel NUC CVSS 3.1HIGH 7.8
  • TI-2019-10877 Out-of-bounds write in Intel NUC CVSS 3.1MEDIUM 6.7
  • TI-2019-10876 Integer overflow in Intel NUC CVSS 3.1MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences