CVE & CISA-KEV Catalog

CVE-2019-11136

MEDIUM
6.7
CVSS v3
NVD

Description

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

How to fix

Remediation Available
apollo 4200 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
apollo 4200 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant bl460c gen10 server blade firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant bl460c gen9 server blade firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant bl660c gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl120 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl120 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl160 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl160 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl180 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl180 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl360 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl360 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl380 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl380 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl560 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl560 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl580 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant dl580 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl60 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant dl80 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant e910 server blade firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant ml110 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant ml110 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant ml150 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant ml350 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant ml350 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant ws460c gen9 graphics server blade firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl170r gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant xl170r gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl190r gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant xl190r gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl230a gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl230k gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant xl250a gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl270d gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant xl450 gen10 server firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
proliant xl450 gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
proliant xl730f gen9 server firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
synergy 480 gen10 compute module firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
synergy 480 gen9 compute module firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
synergy 620 gen9 compute module firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD
synergy 660 gen10 compute module firmwareNVD
Affected:< 2.20Fixed in:2.20CVE-2019-11136derived from NVD
synergy 680 gen9 compute module firmwareNVD
Affected:< 2.76Fixed in:2.76CVE-2019-11136derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.40%probability of exploitation in 30 days
32ndpercentile

Low risk: more likely to be exploited than 32% of all known CVEs.

References

Vendor Advisory1
Third-Party Advisory1
Other references1
Embed a live status badge for CVE-2019-11136
CVE-2019-11136 severity badge

Markdown

[![CVE-2019-11136](https://tridentstack.com/cve/badge/CVE-2019-11136.svg)](https://tridentstack.com/cve/CVE-2019-11136)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-11136"><img src="https://tridentstack.com/cve/badge/CVE-2019-11136.svg" alt="CVE-2019-11136"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.