CVE-2019-11137
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
- CVSS 3.1
- 8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-25)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hpe:apollo_4200_gen10_server_firmware
- hpe:apollo_4200_gen9_server_firmware
- hpe:proliant_bl460c_gen10_server_blade_firmware
- hpe:proliant_bl460c_gen9_server_blade_firmware
- hpe:proliant_bl660c_gen9_server_firmware
- hpe:proliant_dl120_gen10_server_firmware
- hpe:proliant_dl120_gen9_server_firmware
- hpe:proliant_dl160_gen10_server_firmware
- hpe:proliant_dl160_gen9_server_firmware
- hpe:proliant_dl180_gen10_server_firmware
- hpe:proliant_dl180_gen9_server_firmware
- hpe:proliant_dl360_gen10_server_firmware
- hpe:proliant_dl360_gen9_server_firmware
- hpe:proliant_dl380_gen10_server_firmware
- hpe:proliant_dl380_gen9_server_firmware
- hpe:proliant_dl560_gen10_server_firmware
- hpe:proliant_dl560_gen9_server_firmware
- hpe:proliant_dl580_gen10_server_firmware
- hpe:proliant_dl580_gen9_server_firmware
- hpe:proliant_dl60_gen9_server_firmware
- hpe:proliant_dl80_gen9_server_firmware
- hpe:proliant_e910_server_blade_firmware
- hpe:proliant_ml110_gen10_server_firmware
- hpe:proliant_ml110_gen9_server_firmware
- hpe:proliant_ml150_gen9_server_firmware
- hpe:proliant_ml350_gen10_server_firmware
- hpe:proliant_ml350_gen9_server_firmware
- hpe:proliant_ws460c_gen9_graphics_server_blade_firmware
- hpe:proliant_xl170r_gen10_server_firmware
- hpe:proliant_xl170r_gen9_server_firmware
- hpe:proliant_xl190r_gen10_server_firmware
- hpe:proliant_xl190r_gen9_server_firmware
- hpe:proliant_xl230a_gen9_server_firmware
- hpe:proliant_xl230k_gen10_server_firmware
- hpe:proliant_xl250a_gen9_server_firmware
- hpe:proliant_xl270d_gen10_server_firmware
- hpe:proliant_xl450_gen10_server_firmware
- hpe:proliant_xl450_gen9_server_firmware
- hpe:proliant_xl730f_gen9_server_firmware
- hpe:synergy_480_gen10_compute_module_firmware
- hpe:synergy_480_gen9_compute_module_firmware
- hpe:synergy_620_gen9_compute_module_firmware
- hpe:synergy_660_gen10_compute_module_firmware
- hpe:synergy_680_gen9_compute_module_firmware
- intel:atom_c2308_firmware
- intel:atom_c2316_firmware
- intel:atom_c2338_firmware
- intel:atom_c2350_firmware
- intel:atom_c2358_firmware
- intel:atom_c2508_firmware
References
- https://support.f5.com/csp/article/K56215245?utm_source=f5support&%3Butm_medium=RSS
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
- https://support.f5.com/csp/article/K56215245?utm_source=f5support&%3Butm_medium=RSS
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us