CVE-2019-11127

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Metrics

CVSS 3.0 6.7/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC Firmware	Please see reference document.

References

http://www.securityfocus.com/bid/108766Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html?wapkw=2019-11129Patch, Vendor Advisory
http://www.securityfocus.com/bid/108766Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html

Timeline

Published: Jun 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111286.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111296.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-11138.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s CVE-2019-111319.8Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potent CVE-2019-111328.4Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to pot CVE-2019-111337.8Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially ena CVE-2019-111356.5TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informat CVE-2019-111366.7Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors CVE-2019-111378.2Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xe CVE-2019-111396.0Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to p CVE-2019-111406.7Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privileg CVE-2019-111436.7Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable es