Lucene search

[email protected]CVE-2019-11137

HistoryNov 14, 2019 - 5:15 p.m.

CVE-2019-11137

2019-11-1417:15:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2019-11137

input validation

firmware

intel xeon

intel atom

privilege escalation

denial of service

information disclosure

nvd

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Insufficient input validation in system firmware for Intel® Xeon® Scalable Processors, Intel® Xeon® Processors D Family, Intel® Xeon® Processors E5 v4 Family, Intel® Xeon® Processors E7 v4 Family and Intel® Atom® processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

CPENameOperatorVersion
intel:xeon_platinum_8253_firmwareintel xeon platinum 8253 firmwareeq-
intel:xeon_platinum_8256_firmwareintel xeon platinum 8256 firmwareeq-
intel:xeon_platinum_8260_firmwareintel xeon platinum 8260 firmwareeq-
intel:xeon_platinum_8276_firmwareintel xeon platinum 8276 firmwareeq-
intel:xeon_platinum_8276m_firmwareintel xeon platinum 8276m firmwareeq-
intel:xeon_platinum_8276l_firmwareintel xeon platinum 8276l firmwareeq-
intel:xeon_platinum_8280l_firmwareintel xeon platinum 8280l firmwareeq-
intel:xeon_platinum_8260l_firmwareintel xeon platinum 8260l firmwareeq-
intel:xeon_platinum_8280m_firmwareintel xeon platinum 8280m firmwareeq-
intel:xeon_platinum_8260m_firmwareintel xeon platinum 8260m firmwareeq-

CPE	Name	Operator	Version
intel:xeon_platinum_8253_firmware	intel xeon platinum 8253 firmware	eq	-
intel:xeon_platinum_8256_firmware	intel xeon platinum 8256 firmware	eq	-
intel:xeon_platinum_8260_firmware	intel xeon platinum 8260 firmware	eq	-
intel:xeon_platinum_8276_firmware	intel xeon platinum 8276 firmware	eq	-
intel:xeon_platinum_8276m_firmware	intel xeon platinum 8276m firmware	eq	-
intel:xeon_platinum_8276l_firmware	intel xeon platinum 8276l firmware	eq	-
intel:xeon_platinum_8280l_firmware	intel xeon platinum 8280l firmware	eq	-
intel:xeon_platinum_8260l_firmware	intel xeon platinum 8260l firmware	eq	-
intel:xeon_platinum_8280m_firmware	intel xeon platinum 8280m firmware	eq	-
intel:xeon_platinum_8260m_firmware	intel xeon platinum 8260m firmware	eq	-

Rows per page:

1-10 of 2841

References

support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2019-11137

prion1 intel1 ibm1 f51 hp1 lenovo2