60
CVE-2019-11140
—CVSS 3.0
6.7 medium
EPSS
<1%p29
Published
()
Modified
Description
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
- Vendors
- intel
- Products
- nuc kit firmware, compute stick firmware, compute card firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H