PT-2019-4281 · Intel · Intel Xeon Scalable Processors+2

Published 2019-11-12 · Updated 2022-04-18 · CVE-2019-11136

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors and Intel Xeon Processors D Family (affected versions not specified)

Description The issue is related to insufficient access control in system firmware, which may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access. This could result in an attacker gaining elevated privileges, causing a denial of service, or accessing protected information.

Recommendations For Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors and Intel Xeon Processors D Family, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2019-04888

CVE-2019-11136

Affected Products

2Nd Generation Intel Xeon Scalable Processors

Intel Xeon Processor D Family

Intel Xeon Scalable Processors

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-11136 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04888 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11136 · Vendor Advisory
• https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us · Note