Intel released security updates to address high-severity vulnerabilities in NUC firmware, the Processor Identification Utility, and the Computing Improvement Program. One of the flaws addressed by Intel is an insufficient session validation vulnerability that could be exploited by attackers for privilege escalation, information disclosure and denial-of-service ( DoS ) attacks. Intel also addressed an insufficient access control issue, tracked as CVE-2019-11163, affecting the Intel processor Identification Utility for Windows. The vulnerability was not rated as critical because it requires local access to the targeted device for the exploitation.”]
Source: https://securityaffairs.co/wordpress/90032/security/intel-flaws-nuc-firmware.html