CVE-2019-11179

Published: Nov 14, 2019Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.

Affected (1)

Products: Intel: Baseboard Management Controller Firmware

Intel

1 product

Baseboard Management Controller Firmware

Configuration A

1 vulnerable · 84 platform

Vulnerable Software	Affected Versions
Intel Baseboard Management Controller Firmware	Before 2.18

Running on/with	Platform Versions
Intel Bbs2600bpb	All versions
Intel Bbs2600bpbr	All versions
Intel Bbs2600bpq	All versions
Intel Bbs2600bpqr	All versions
Intel Bbs2600bps	All versions
Intel Bbs2600bpsr	All versions
Intel Bbs2600stb	All versions
Intel Bbs2600stbr	All versions
Intel Bbs2600stq	All versions
Intel Bbs2600stqr	All versions
Intel Hns2600bpb	All versions
Intel Hns2600bpb24	All versions
Intel Hns2600bpb24r	All versions
Intel Hns2600bpb24rx	All versions
Intel Hns2600bpblc	All versions
Intel Hns2600bpblc24	All versions
Intel Hns2600bpblc24r	All versions
Intel Hns2600bpblcr	All versions
Intel Hns2600bpbr	All versions
Intel Hns2600bpbrx	All versions
Intel Hns2600bpq	All versions
Intel Hns2600bpq24	All versions
Intel Hns2600bpq24r	All versions
Intel Hns2600bpqr	All versions
Intel Hns2600bps	All versions
Intel Hns2600bps24	All versions
Intel Hns2600bps24r	All versions
Intel Hns2600bpsr	All versions
Intel Hpchns2600bpbr	All versions
Intel Hpchns2600bpqr	All versions
Intel Hpchns2600bpsr	All versions
Intel Hpcr1208wfqysr	All versions
Intel Hpcr1208wftysr	All versions
Intel Hpcr1304wf0ysr	All versions
Intel Hpcr1304wftysr	All versions
Intel Hpcr2208wf0zsr	All versions
Intel Hpcr2208wfqzsr	All versions
Intel Hpcr2208wftzsr	All versions
Intel Hpcr2208wftzsrx	All versions
Intel Hpcr2224wftzsr	All versions
Intel Hpcr2308wftzsr	All versions
Intel Hpcr2312wf0npr	All versions
Intel Hpcr2312wftzsr	All versions
Intel R1208wfqysr	All versions
Intel R1208wftys	All versions
Intel R1208wftysr	All versions
Intel R1304wf0ys	All versions
Intel R1304wf0ysr	All versions
Intel R1304wftys	All versions
Intel R1304wftysr	All versions
Intel R2208wf0zs	All versions
Intel R2208wf0zsr	All versions
Intel R2208wfqzs	All versions
Intel R2208wfqzsr	All versions
Intel R2208wftzs	All versions
Intel R2208wftzsr	All versions
Intel R2208wftzsrx	All versions
Intel R2224wfqzs	All versions
Intel R2224wftzs	All versions
Intel R2224wftzsr	All versions
Intel R2308wftzs	All versions
Intel R2308wftzsr	All versions
Intel R2312wf0np	All versions
Intel R2312wf0npr	All versions
Intel R2312wfqzs	All versions
Intel R2312wftzs	All versions
Intel R2312wftzsr	All versions
Intel S2600stb	All versions
Intel S2600stbr	All versions
Intel S2600stq	All versions
Intel S2600stqr	All versions
Intel S2600wf0	All versions
Intel S2600wf0r	All versions
Intel S2600wfq	All versions
Intel S2600wfqr	All versions
Intel S2600wft	All versions
Intel S2600wftr	All versions
Intel S9232wk1hlc	All versions
Intel S9232wk2hac	All versions
Intel S9232wk2hlc	All versions
Intel S9248wk1hlc	All versions
Intel S9248wk2hac	All versions
Intel S9248wk2hlc	All versions
Intel S9256wk1hlc	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.