What’s Vulnerable › Vulnerabilities

CVE-2019-14608

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-16 · updated 2026-06-17
• Weakness: CWE-119

Description

Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel Cd1Iv128Mk Firmware: before 0038 — fixed in 0038
• Intel Cd1M3128Mk Firmware: before 0058 — fixed in 0058
• Intel Cd1P64Gk Firmware: before 0053 — fixed in 0053
• Intel D34010Wyb Firmware: before 0054 — fixed in 0054
• Intel De3815Tybe Firmware: before 0024 — fixed in 0024
• Intel Nuc6Cays Firmware: before 0064 — fixed in 0064
• Intel Nuc6I5Syh Firmware: before 0072 — fixed in 0072
• Intel Nuc6I7Kyk Firmware: before 0066 — fixed in 0066
• Intel Nuc7Cjyh Firmware: before 0053 — fixed in 0053
• Intel Nuc7I3Dnhe Firmware: before 0067 — fixed in 0067
• Intel Nuc7I5Dnke Firmware: before 0067 — fixed in 0067
• Intel Nuc7I7Dnke Firmware: before 0067 — fixed in 0067
• Intel Nuc8I3Cysm Firmware: before 0043 — fixed in 0043
• Intel Nuc8I7Bek Firmware: before 0077 — fixed in 0077
• Intel Nuc8I7Hnk Firmware: before 0059 — fixed in 0059
• Intel Nuc 8 Mainstream Game Kit Firmware: before 0036 — fixed in 0036
• Intel Nuc 8 Mainstream Game Mini Computer Firmware: before 0036 — fixed in 0036
• Intel Stk2M3W64Cc Firmware: before 0062 — fixed in 0062
• Intel Stk2Mv64Cc Firmware: before 0061 — fixed in 0061

How to fix

Upgrade to a fixed version: Intel Cd1Iv128Mk Firmware 0038; Intel Cd1M3128Mk Firmware 0058; Intel Cd1P64Gk Firmware 0053; Intel D34010Wyb Firmware 0054; Intel De3815Tybe Firmware 0024; Intel Nuc6Cays Firmware 0064; Intel Nuc6I5Syh Firmware 0072; Intel Nuc6I7Kyk Firmware 0066; Intel Nuc7Cjyh Firmware 0053; Intel Nuc7I3Dnhe Firmware 0067; Intel Nuc7I5Dnke Firmware 0067; Intel Nuc7I7Dnke Firmware 0067. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html

Get alerted when CVE-2019-14608 or the next vulnerability affects your stack