7.8

CVE-2019-11170

Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Baseboard Management Controller Firmware Version < 2.18
   Intel ≫ Bbs2600bpb Version-
   Intel ≫ Bbs2600bpbr Version-
   Intel ≫ Bbs2600bpq Version-
   Intel ≫ Bbs2600bpqr Version-
   Intel ≫ Bbs2600bps Version-
   Intel ≫ Bbs2600bpsr Version-
   Intel ≫ Bbs2600stb Version-
   Intel ≫ Bbs2600stbr Version-
   Intel ≫ Bbs2600stq Version-
   Intel ≫ Bbs2600stqr Version-
   Intel ≫ Hns2600bpb Version-
   Intel ≫ Hns2600bpb24 Version-
   Intel ≫ Hns2600bpb24r Version-
   Intel ≫ Hns2600bpb24rx Version-
   Intel ≫ Hns2600bpblc Version-
   Intel ≫ Hns2600bpblc24 Version-
   Intel ≫ Hns2600bpblc24r Version-
   Intel ≫ Hns2600bpblcr Version-
   Intel ≫ Hns2600bpbr Version-
   Intel ≫ Hns2600bpbrx Version-
   Intel ≫ Hns2600bpq Version-
   Intel ≫ Hns2600bpq24 Version-
   Intel ≫ Hns2600bpq24r Version-
   Intel ≫ Hns2600bpqr Version-
   Intel ≫ Hns2600bps Version-
   Intel ≫ Hns2600bps24 Version-
   Intel ≫ Hns2600bps24r Version-
   Intel ≫ Hns2600bpsr Version-
   Intel ≫ Hpchns2600bpbr Version-
   Intel ≫ Hpchns2600bpqr Version-
   Intel ≫ Hpchns2600bpsr Version-
   Intel ≫ Hpcr1208wfqysr Version-
   Intel ≫ Hpcr1208wftysr Version-
   Intel ≫ Hpcr1304wf0ysr Version-
   Intel ≫ Hpcr1304wftysr Version-
   Intel ≫ Hpcr2208wf0zsr Version-
   Intel ≫ Hpcr2208wfqzsr Version-
   Intel ≫ Hpcr2208wftzsr Version-
   Intel ≫ Hpcr2208wftzsrx Version-
   Intel ≫ Hpcr2224wftzsr Version-
   Intel ≫ Hpcr2308wftzsr Version-
   Intel ≫ Hpcr2312wf0npr Version-
   Intel ≫ Hpcr2312wftzsr Version-
   Intel ≫ R1208wfqysr Version-
   Intel ≫ R1208wftys Version-
   Intel ≫ R1208wftysr Version-
   Intel ≫ R1304wf0ys Version-
   Intel ≫ R1304wf0ysr Version-
   Intel ≫ R1304wftys Version-
   Intel ≫ R1304wftysr Version-
   Intel ≫ R2208wf0zs Version-
   Intel ≫ R2208wf0zsr Version-
   Intel ≫ R2208wfqzs Version-
   Intel ≫ R2208wfqzsr Version-
   Intel ≫ R2208wftzs Version-
   Intel ≫ R2208wftzsr Version-
   Intel ≫ R2208wftzsrx Version-
   Intel ≫ R2224wfqzs Version-
   Intel ≫ R2224wftzs Version-
   Intel ≫ R2224wftzsr Version-
   Intel ≫ R2308wftzs Version-
   Intel ≫ R2308wftzsr Version-
   Intel ≫ R2312wf0np Version-
   Intel ≫ R2312wf0npr Version-
   Intel ≫ R2312wfqzs Version-
   Intel ≫ R2312wftzs Version-
   Intel ≫ R2312wftzsr Version-
   Intel ≫ S2600stb Version-
   Intel ≫ S2600stbr Version-
   Intel ≫ S2600stq Version-
   Intel ≫ S2600stqr Version-
   Intel ≫ S2600wf0 Version-
   Intel ≫ S2600wf0r Version-
   Intel ≫ S2600wfq Version-
   Intel ≫ S2600wfqr Version-
   Intel ≫ S2600wft Version-
   Intel ≫ S2600wftr Version-
   Intel ≫ S9232wk1hlc Version-
   Intel ≫ S9232wk2hac Version-
   Intel ≫ S9232wk2hlc Version-
   Intel ≫ S9248wk1hlc Version-
   Intel ≫ S9248wk2hac Version-
   Intel ≫ S9248wk2hlc Version-
   Intel ≫ S9256wk1hlc Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.