9.8

CVE-2019-11171

Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Baseboard Management Controller Firmware Version < 2.18
   Intel ≫ Bbs2600bpb Version -
   Intel ≫ Bbs2600bpbr Version -
   Intel ≫ Bbs2600bpq Version -
   Intel ≫ Bbs2600bpqr Version -
   Intel ≫ Bbs2600bps Version -
   Intel ≫ Bbs2600bpsr Version -
   Intel ≫ Bbs2600stb Version -
   Intel ≫ Bbs2600stbr Version -
   Intel ≫ Bbs2600stq Version -
   Intel ≫ Bbs2600stqr Version -
   Intel ≫ Hns2600bpb Version -
   Intel ≫ Hns2600bpb24 Version -
   Intel ≫ Hns2600bpb24r Version -
   Intel ≫ Hns2600bpb24rx Version -
   Intel ≫ Hns2600bpblc Version -
   Intel ≫ Hns2600bpblc24 Version -
   Intel ≫ Hns2600bpblc24r Version -
   Intel ≫ Hns2600bpblcr Version -
   Intel ≫ Hns2600bpbr Version -
   Intel ≫ Hns2600bpbrx Version -
   Intel ≫ Hns2600bpq Version -
   Intel ≫ Hns2600bpq24 Version -
   Intel ≫ Hns2600bpq24r Version -
   Intel ≫ Hns2600bpqr Version -
   Intel ≫ Hns2600bps Version -
   Intel ≫ Hns2600bps24 Version -
   Intel ≫ Hns2600bps24r Version -
   Intel ≫ Hns2600bpsr Version -
   Intel ≫ Hpchns2600bpbr Version -
   Intel ≫ Hpchns2600bpqr Version -
   Intel ≫ Hpchns2600bpsr Version -
   Intel ≫ Hpcr1208wfqysr Version -
   Intel ≫ Hpcr1208wftysr Version -
   Intel ≫ Hpcr1304wf0ysr Version -
   Intel ≫ Hpcr1304wftysr Version -
   Intel ≫ Hpcr2208wf0zsr Version -
   Intel ≫ Hpcr2208wfqzsr Version -
   Intel ≫ Hpcr2208wftzsr Version -
   Intel ≫ Hpcr2208wftzsrx Version -
   Intel ≫ Hpcr2224wftzsr Version -
   Intel ≫ Hpcr2308wftzsr Version -
   Intel ≫ Hpcr2312wf0npr Version -
   Intel ≫ Hpcr2312wftzsr Version -
   Intel ≫ R1208wfqysr Version -
   Intel ≫ R1208wftys Version -
   Intel ≫ R1208wftysr Version -
   Intel ≫ R1304wf0ys Version -
   Intel ≫ R1304wf0ysr Version -
   Intel ≫ R1304wftys Version -
   Intel ≫ R1304wftysr Version -
   Intel ≫ R2208wf0zs Version -
   Intel ≫ R2208wf0zsr Version -
   Intel ≫ R2208wfqzs Version -
   Intel ≫ R2208wfqzsr Version -
   Intel ≫ R2208wftzs Version -
   Intel ≫ R2208wftzsr Version -
   Intel ≫ R2208wftzsrx Version -
   Intel ≫ R2224wfqzs Version -
   Intel ≫ R2224wftzs Version -
   Intel ≫ R2224wftzsr Version -
   Intel ≫ R2308wftzs Version -
   Intel ≫ R2308wftzsr Version -
   Intel ≫ R2312wf0np Version -
   Intel ≫ R2312wf0npr Version -
   Intel ≫ R2312wfqzs Version -
   Intel ≫ R2312wftzs Version -
   Intel ≫ R2312wftzsr Version -
   Intel ≫ S2600stb Version -
   Intel ≫ S2600stbr Version -
   Intel ≫ S2600stq Version -
   Intel ≫ S2600stqr Version -
   Intel ≫ S2600wf0 Version -
   Intel ≫ S2600wf0r Version -
   Intel ≫ S2600wfq Version -
   Intel ≫ S2600wfqr Version -
   Intel ≫ S2600wft Version -
   Intel ≫ S2600wftr Version -
   Intel ≫ S9232wk1hlc Version -
   Intel ≫ S9232wk2hac Version -
   Intel ≫ S9232wk2hlc Version -
   Intel ≫ S9248wk1hlc Version -
   Intel ≫ S9248wk2hac Version -
   Intel ≫ S9248wk2hlc Version -
   Intel ≫ S9256wk1hlc Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.56% 0.72
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
Vendor Advisory