PT-2019-3993 · Intel · Intel Baseboard Management Controller

Daniel Medina Velazquez · Published 2019-11-12 · Updated 2021-07-21 · CVE-2019-11182

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller (BMC) firmware (affected versions not specified)

Description The issue is related to memory corruption in the Intel Baseboard Management Controller firmware, which may allow an unauthenticated user to potentially enable denial of service via network access. It is also described as a buffer overflow vulnerability that can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2019-04524

CVE-2019-11182

Affected Products

Intel Baseboard Management Controller

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11182 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11182 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04524 · Security Note