Insufficient Session Validation in Intel(R) NUC System Firmware: Privilege Escalation, DoS, and Information Disclosure Vulnerability

Insufficient Session Validation in Intel(R) NUC System Firmware: Privilege Escalation, DoS, and Information Disclosure Vulnerability

CVE-2019-11140 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Learn more about our User Device Pen Test.