CVE-2019-11136

CVE-2019-11136

Medium · published November 14, 2019

CVSS v3.1
6.7
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Published
2019-11-14T22:15Z
Affected products (284)
ProductVersionsFixed in
intel/xeon_silver_4112_firmwareall versions—
intel/xeon_silver_4108_firmwareall versions—
intel/xeon_silver_4110_firmwareall versions—
intel/xeon_bronze_3204_firmwareall versions—
intel/xeon_bronze_3106_firmwareall versions—
intel/xeon_bronze_3104_firmwareall versions—
intel/xeon_d-1602_firmwareall versions—
intel/xeon_d-1653n_firmwareall versions—
intel/xeon_d-1622_firmwareall versions—
intel/xeon_d-1623n_firmwareall versions—
intel/xeon_d-1627_firmwareall versions—
intel/xeon_d-1637_firmwareall versions—
intel/xeon_d-1633n_firmwareall versions—
intel/xeon_d-1649n_firmwareall versions—
intel/xeon_d-2141i_firmwareall versions—
intel/xeon_d-2177nt_firmwareall versions—
intel/xeon_d-2161i_firmwareall versions—
intel/xeon_d-2143it_firmwareall versions—
intel/xeon_d-2146nt_firmwareall versions—
intel/xeon_d-2145nt_firmwareall versions—
intel/xeon_d-2123it_firmwareall versions—
intel/xeon_d-2173it_firmwareall versions—
intel/xeon_d-2191_firmwareall versions—
intel/xeon_d-2187nt_firmwareall versions—
intel/xeon_d-2142it_firmwareall versions—
intel/xeon_d-2163it_firmwareall versions—
intel/xeon_d-2183it_firmwareall versions—
intel/xeon_d-2166nt_firmwareall versions—
intel/xeon_d-1533n_firmwareall versions—
intel/xeon_d-1513n_firmwareall versions—
intel/xeon_d-1543n_firmwareall versions—
intel/xeon_d-1523n_firmwareall versions—
intel/xeon_d-1553n_firmwareall versions—
intel/xeon_d-1539_firmwareall versions—
intel/xeon_d-1529_firmwareall versions—
intel/xeon_d-1559_firmwareall versions—
intel/xeon_d-1557_firmwareall versions—
intel/xeon_d-1567_firmwareall versions—
intel/xeon_d-1577_firmwareall versions—
intel/xeon_d-1571_firmwareall versions—
intel/xeon_d-1528_firmwareall versions—
intel/xeon_d-1541_firmwareall versions—
intel/xeon_d-1518_firmwareall versions—
intel/xeon_d-1521_firmwareall versions—
intel/xeon_d-1531_firmwareall versions—
intel/xeon_d-1548_firmwareall versions—
intel/xeon_d-1527_firmwareall versions—
intel/xeon_d-1537_firmwareall versions—
intel/xeon_d-1520_firmwareall versions—
intel/xeon_d-1540_firmwareall versions—
intel/xeon_e5-2699a_v4_firmwareall versions—
intel/xeon_e5-4627_v4_firmwareall versions—
intel/xeon_e5-4610_v4_firmwareall versions—
intel/xeon_e5-4620_v4_firmwareall versions—
intel/xeon_e5-4628l_v4_firmwareall versions—
intel/xeon_e5-4660_v4_firmwareall versions—
intel/xeon_e5-4640_v4_firmwareall versions—
intel/xeon_e5-4669_v4_firmwareall versions—
intel/xeon_e5-4667_v4_firmwareall versions—
intel/xeon_e5-4655_v4_firmwareall versions—
intel/xeon_e5-4650_v4_firmwareall versions—
intel/xeon_e5-1660_v4_firmwareall versions—
intel/xeon_e5-1630_v4_firmwareall versions—
intel/xeon_e5-1620_v4_firmwareall versions—
intel/xeon_e5-1680_v4_firmwareall versions—
intel/xeon_e5-1650_v4_firmwareall versions—
intel/xeon_e5-2687w_v4_firmwareall versions—
intel/xeon_e5-2695_v4_firmwareall versions—
intel/xeon_e5-2690_v4_firmwareall versions—
intel/xeon_e5-2699_v4_firmwareall versions—
intel/xeon_e5-2650l_v4_firmwareall versions—
intel/xeon_e5-2658_v4_firmwareall versions—
intel/xeon_e5-2698_v4_firmwareall versions—
intel/xeon_e5-2660_v4_firmwareall versions—
intel/xeon_e5-2680_v4_firmwareall versions—
intel/xeon_e5-2697_v4_firmwareall versions—
intel/xeon_e5-2683_v4_firmwareall versions—
intel/xeon_e5-2628l_v4_firmwareall versions—
intel/xeon_e5-2650_v4_firmwareall versions—
intel/xeon_e5-2697a_v4_firmwareall versions—
intel/xeon_e5-2648l_v4_firmwareall versions—
intel/xeon_e5-2620_v4_firmwareall versions—
intel/xeon_e5-2630l_v4_firmwareall versions—
intel/xeon_e5-2608l_v4_firmwareall versions—
intel/xeon_e5-2667_v4_firmwareall versions—
intel/xeon_e5-2643_v4_firmwareall versions—
intel/xeon_e5-2623_v4_firmwareall versions—
intel/xeon_e5-2609_v4_firmwareall versions—
intel/xeon_e5-2630_v4_firmwareall versions—
intel/xeon_e5-2618l_v4_firmwareall versions—
intel/xeon_e5-2637_v4_firmwareall versions—
intel/xeon_e5-2603_v4_firmwareall versions—
intel/xeon_e5-2640_v4_firmwareall versions—
intel/xeon_e7-8894_v4_firmwareall versions—
intel/xeon_e7-8893_v4_firmwareall versions—
intel/xeon_e7-8891_v4_firmwareall versions—
intel/xeon_e7-8890_v4_firmwareall versions—
intel/xeon_e7-8880_v4_firmwareall versions—
intel/xeon_e7-8870_v4_firmwareall versions—
intel/xeon_e7-8867_v4_firmwareall versions—
intel/xeon_e7-8860_v4_firmwareall versions—
intel/xeon_e7-4850_v4_firmwareall versions—
intel/xeon_e7-4830_v4_firmwareall versions—
intel/xeon_e7-4820_v4_firmwareall versions—
intel/xeon_e7-4809_v4_firmwareall versions—
intel/atom_c3308_firmwareall versions—
intel/atom_c3336_firmwareall versions—
intel/atom_c3338_firmwareall versions—
intel/atom_c3508_firmwareall versions—
intel/atom_c3538_firmwareall versions—
intel/atom_c3558_firmwareall versions—
intel/atom_c3708_firmwareall versions—
intel/atom_c3750_firmwareall versions—
intel/atom_c3758_firmwareall versions—
intel/atom_c3808_firmwareall versions—
intel/atom_c3850_firmwareall versions—
intel/atom_c3858_firmwareall versions—
intel/atom_c3830_firmwareall versions—
intel/atom_c3950_firmwareall versions—
intel/atom_c3955_firmwareall versions—
intel/atom_c3958_firmwareall versions—
intel/atom_c2758_firmwareall versions—
intel/atom_c2738_firmwareall versions—
intel/atom_c2718_firmwareall versions—
intel/atom_c2558_firmwareall versions—
intel/atom_c2538_firmwareall versions—
intel/atom_c2518_firmwareall versions—
intel/atom_c2508_firmwareall versions—
intel/atom_c2358_firmwareall versions—
intel/atom_c2338_firmwareall versions—
intel/atom_c2308_firmwareall versions—
intel/atom_c2750_firmwareall versions—
intel/atom_c2730_firmwareall versions—
intel/atom_c2550_firmwareall versions—
intel/atom_c2530_firmwareall versions—
intel/atom_c2516_firmwareall versions—
intel/atom_c2350_firmwareall versions—
intel/atom_c2316_firmwareall versions—
hpe/apollo_4200_gen10_server_firmware< 2.202.20
hpe/proliant_bl460c_gen10_server_blade_firmware< 2.202.20
hpe/proliant_dl580_gen10_server_firmware< 2.202.20
hpe/proliant_dl560_gen10_server_firmware< 2.202.20
hpe/proliant_dl380_gen10_server_firmware< 2.202.20
hpe/proliant_dl360_gen10_server_firmware< 2.202.20
hpe/proliant_dl180_gen10_server_firmware< 2.202.20
hpe/proliant_dl160_gen10_server_firmware< 2.202.20
hpe/proliant_dl120_gen10_server_firmware< 2.202.20
hpe/proliant_ml350_gen10_server_firmware< 2.202.20
hpe/proliant_ml110_gen10_server_firmware< 2.202.20
hpe/proliant_xl450_gen10_server_firmware< 2.202.20
hpe/proliant_xl270d_gen10_server_firmware< 2.202.20
hpe/proliant_xl230k_gen10_server_firmware< 2.202.20
hpe/proliant_xl190r_gen10_server_firmware< 2.202.20
hpe/proliant_xl170r_gen10_server_firmware< 2.202.20
hpe/proliant_e910_server_blade_firmware< 2.202.20
hpe/synergy_660_gen10_compute_module_firmware< 2.202.20
hpe/synergy_480_gen10_compute_module_firmware< 2.202.20
hpe/proliant_bl660c_gen9_server_firmware< 2.762.76
hpe/proliant_bl460c_gen9_server_blade_firmware< 2.762.76
hpe/proliant_dl580_gen9_server_firmware< 2.762.76
hpe/proliant_dl560_gen9_server_firmware< 2.762.76
hpe/proliant_dl380_gen9_server_firmware< 2.762.76
hpe/proliant_dl360_gen9_server_firmware< 2.762.76
hpe/proliant_dl180_gen9_server_firmware< 2.762.76
hpe/proliant_dl160_gen9_server_firmware< 2.762.76
hpe/proliant_dl120_gen9_server_firmware< 2.762.76
hpe/proliant_dl80_gen9_server_firmware< 2.762.76
hpe/proliant_dl60_gen9_server_firmware< 2.762.76
hpe/proliant_xl730f_gen9_server_firmware< 2.762.76
hpe/proliant_xl450_gen9_server_firmware< 2.762.76
hpe/proliant_xl250a_gen9_server_firmware< 2.762.76
hpe/proliant_xl230a_gen9_server_firmware< 2.762.76
hpe/proliant_xl190r_gen9_server_firmware< 2.762.76
hpe/proliant_xl170r_gen9_server_firmware< 2.762.76
hpe/synergy_680_gen9_compute_module_firmware< 2.762.76
hpe/synergy_620_gen9_compute_module_firmware< 2.762.76
hpe/synergy_480_gen9_compute_module_firmware< 2.762.76
hpe/proliant_ml150_gen9_server_firmware< 2.762.76
hpe/proliant_ml110_gen9_server_firmware< 2.762.76
hpe/apollo_4200_gen9_server_firmware< 2.762.76
hpe/proliant_ml350_gen9_server_firmware< 2.762.76
hpe/proliant_ws460c_gen9_graphics_server_blade_firmware< 2.762.76
intel/xeon_platinum_8253_firmwareall versions—
intel/xeon_platinum_8256_firmwareall versions—
intel/xeon_platinum_8260_firmwareall versions—
intel/xeon_platinum_8276_firmwareall versions—
intel/xeon_platinum_8276m_firmwareall versions—
intel/xeon_platinum_8276l_firmwareall versions—
intel/xeon_platinum_8280l_firmwareall versions—
intel/xeon_platinum_8260l_firmwareall versions—
intel/xeon_platinum_8280m_firmwareall versions—
intel/xeon_platinum_8260m_firmwareall versions—
intel/xeon_platinum_8280_firmwareall versions—
intel/xeon_platinum_8260y_firmwareall versions—
intel/xeon_platinum_8268_firmwareall versions—
intel/xeon_platinum_8270_firmwareall versions—
intel/xeon_platinum_8274_firmwareall versions—
intel/xeon_platinum_8284_firmwareall versions—
intel/xeon_platinum_9242_firmwareall versions—
intel/xeon_platinum_9282_firmwareall versions—
intel/xeon_platinum_8153_firmwareall versions—
intel/xeon_platinum_8156_firmwareall versions—
intel/xeon_platinum_8158_firmwareall versions—
intel/xeon_platinum_8176_firmwareall versions—
intel/xeon_platinum_8160_firmwareall versions—
intel/xeon_platinum_8164_firmwareall versions—
intel/xeon_platinum_8168_firmwareall versions—
intel/xeon_platinum_8170_firmwareall versions—
intel/xeon_platinum_8180_firmwareall versions—
intel/xeon_platinum_8160t_firmwareall versions—
intel/xeon_platinum_8160f_firmwareall versions—
intel/xeon_platinum_8176f_firmwareall versions—
intel/xeon_gold_6210u_firmwareall versions—
intel/xeon_gold_6244_firmwareall versions—
intel/xeon_gold_6212u_firmwareall versions—
intel/xeon_gold_6240_firmwareall versions—
intel/xeon_gold_5218_firmwareall versions—
intel/xeon_gold_6230_firmwareall versions—
intel/xeon_gold_5222_firmwareall versions—
intel/xeon_gold_6238t_firmwareall versions—
intel/xeon_gold_6248_firmwareall versions—
intel/xeon_gold_6252_firmwareall versions—
intel/xeon_gold_6242_firmwareall versions—
intel/xeon_gold_6240y_firmwareall versions—
intel/xeon_gold_5217_firmwareall versions—
intel/xeon_gold_6238m_firmwareall versions—
intel/xeon_gold_5218n_firmwareall versions—
intel/xeon_gold_6226_firmwareall versions—
intel/xeon_gold_6254_firmwareall versions—
intel/xeon_gold_5220_firmwareall versions—
intel/xeon_gold_6238l_firmwareall versions—
intel/xeon_gold_5218b_firmwareall versions—
intel/xeon_gold_6240l_firmwareall versions—
intel/xeon_gold_6238_firmwareall versions—
intel/xeon_gold_6240m_firmwareall versions—
intel/xeon_gold_5220s_firmwareall versions—
intel/xeon_gold_5215_firmwareall versions—
intel/xeon_gold_6222v_firmwareall versions—
intel/xeon_gold_6252n_firmwareall versions—
intel/xeon_gold_5215m_firmwareall versions—
intel/xeon_gold_6246_firmwareall versions—
intel/xeon_gold_5215l_firmwareall versions—
intel/xeon_gold_5218t_firmwareall versions—
intel/xeon_gold_5220t_firmwareall versions—
intel/xeon_gold_6209u_firmwareall versions—
intel/xeon_gold_6262v_firmwareall versions—
intel/xeon_gold_5122_firmwareall versions—
intel/xeon_gold_6138_firmwareall versions—
intel/xeon_gold_6148_firmwareall versions—
intel/xeon_gold_5120t_firmwareall versions—
intel/xeon_gold_6136_firmwareall versions—
intel/xeon_gold_6150_firmwareall versions—
intel/xeon_gold_6152_firmwareall versions—
intel/xeon_gold_6130_firmwareall versions—
intel/xeon_gold_6128_firmwareall versions—
intel/xeon_gold_5118_firmwareall versions—
intel/xeon_gold_6134_firmwareall versions—
intel/xeon_gold_6126_firmwareall versions—
intel/xeon_gold_5120_firmwareall versions—
intel/xeon_gold_5115_firmwareall versions—
intel/xeon_gold_6154_firmwareall versions—
intel/xeon_gold_6140_firmwareall versions—
intel/xeon_gold_6140m_firmwareall versions—
intel/xeon_gold_6132_firmwareall versions—
intel/xeon_gold_6138t_firmwareall versions—
intel/xeon_gold_6142f_firmwareall versions—
intel/xeon_gold_6130t_firmwareall versions—
intel/xeon_gold_6138f_firmwareall versions—
intel/xeon_gold_6130f_firmwareall versions—
intel/xeon_gold_6126t_firmwareall versions—
intel/xeon_gold_6126f_firmwareall versions—
intel/xeon_gold_6148f_firmwareall versions—
intel/xeon_gold_6146_firmwareall versions—
intel/xeon_gold_6144_firmwareall versions—
intel/xeon_silver_4209t_firmwareall versions—
intel/xeon_silver_4210_firmwareall versions—
intel/xeon_silver_4214_firmwareall versions—
intel/xeon_silver_4214y_firmwareall versions—
intel/xeon_silver_4215_firmwareall versions—
intel/xeon_silver_4208_firmwareall versions—
intel/xeon_silver_4216_firmwareall versions—
intel/xeon_silver_4116_firmwareall versions—
intel/xeon_silver_4109t_firmwareall versions—
intel/xeon_silver_4114_firmwareall versions—
References (6)
EPSS history
Timeline
  • 14 NOV 16:56Z
    Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R)…
    cvelistv5