{"schemaVersion":3,"id":"CVE-2019-14611","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.","dates":{"published":"2019-12-16T19:11:44.000Z","modified":"2024-08-05T00:19:41.373Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.7,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.6,"severity":"medium","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00336,"percentile":0.25507,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00336},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00336,"percentile":0.25507}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00336,"percentile":0.25507}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"intel","product":"cd1iv128mk_firmware","name":"cd1iv128mk firmware","label":"cd1iv128mk_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0038","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0038","eol":null,"hubHref":"/vendor/intel/cd1iv128mk"},{"vendor":"intel","product":"cd1m3128mk_firmware","name":"cd1m3128mk firmware","label":"cd1m3128mk_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0058","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0058","eol":null,"hubHref":"/vendor/intel/cd1m3128mk"},{"vendor":"intel","product":"cd1p64gk_firmware","name":"cd1p64gk firmware","label":"cd1p64gk_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0053","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0053","eol":null,"hubHref":"/vendor/intel/cd1p64gk"},{"vendor":"intel","product":"d34010wyb_firmware","name":"d34010wyb firmware","label":"d34010wyb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0054","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0054","eol":null,"hubHref":"/vendor/intel/d34010wyb"},{"vendor":"intel","product":"de3815tybe_firmware","name":"de3815tybe firmware","label":"de3815tybe_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0024","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0024","eol":null,"hubHref":"/vendor/intel/de3815tybe"},{"vendor":"intel","product":"nuc_8_mainstream_game_kit_firmware","name":"nuc 8 mainstream game kit firmware","label":"nuc_8_mainstream_game_kit_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0036","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0036","eol":null,"hubHref":"/vendor/intel/nuc_8_mainstream_game_kit"},{"vendor":"intel","product":"nuc_8_mainstream_game_mini_computer_firmware","name":"nuc 8 mainstream game mini computer firmware","label":"nuc_8_mainstream_game_mini_computer_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0036","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0036","eol":null,"hubHref":"/vendor/intel/nuc_8_mainstream_game_mini_computer"},{"vendor":"intel","product":"nuc6cays_firmware","name":"nuc6cays firmware","label":"nuc6cays_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0064","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0064","eol":null,"hubHref":"/vendor/intel/nuc6cays"},{"vendor":"intel","product":"nuc6i5syh_firmware","name":"nuc6i5syh firmware","label":"nuc6i5syh_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0072","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0072","eol":null,"hubHref":"/vendor/intel/nuc6i5syh"},{"vendor":"intel","product":"nuc6i7kyk_firmware","name":"nuc6i7kyk firmware","label":"nuc6i7kyk_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0066","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0066","eol":null,"hubHref":"/vendor/intel/nuc6i7kyk"},{"vendor":"intel","product":"nuc7cjyh_firmware","name":"nuc7cjyh firmware","label":"nuc7cjyh_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0053","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0053","eol":null,"hubHref":"/vendor/intel/nuc7cjyh"},{"vendor":"intel","product":"nuc7i3dnhe_firmware","name":"nuc7i3dnhe firmware","label":"nuc7i3dnhe_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0067","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0067","eol":null,"hubHref":"/vendor/intel/nuc7i3dnhe"},{"vendor":"intel","product":"nuc7i5dnke_firmware","name":"nuc7i5dnke firmware","label":"nuc7i5dnke_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0067","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0067","eol":null,"hubHref":"/vendor/intel/nuc7i5dnke"},{"vendor":"intel","product":"nuc7i7dnke_firmware","name":"nuc7i7dnke firmware","label":"nuc7i7dnke_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0067","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0067","eol":null,"hubHref":"/vendor/intel/nuc7i7dnke"},{"vendor":"intel","product":"nuc8i3cysm_firmware","name":"nuc8i3cysm firmware","label":"nuc8i3cysm_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0043","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0043","eol":null,"hubHref":"/vendor/intel/nuc8i3cysm"},{"vendor":"intel","product":"nuc8i7bek_firmware","name":"nuc8i7bek firmware","label":"nuc8i7bek_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0077","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0077","eol":null,"hubHref":"/vendor/intel/nuc8i7bek"},{"vendor":"intel","product":"nuc8i7hnk_firmware","name":"nuc8i7hnk firmware","label":"nuc8i7hnk_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0059","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0059","eol":null,"hubHref":"/vendor/intel/nuc8i7hnk"},{"vendor":"intel","product":"stk2m3w64cc_firmware","name":"stk2m3w64cc firmware","label":"stk2m3w64cc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0062","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0062","eol":null,"hubHref":"/vendor/intel/stk2m3w64cc"},{"vendor":"intel","product":"stk2mv64cc_firmware","name":"stk2mv64cc firmware","label":"stk2mv64cc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0061","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0061","eol":null,"hubHref":"/vendor/intel/stk2mv64cc"}],"affectedCount":19,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html","label":"www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html","hostname":"www.intel.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-12-16T19:11:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T00:19:41.373Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:11:09.553Z","stale":false,"partial":false}}