ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-11136

—
CVSS 3.1
6.7 medium
EPSS
<1%p31
Published
()
Modified
Description

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Vendors
intelhpe
Products
xeon platinum 8253 firmware, xeon platinum 8256 firmware, xeon platinum 8260 firmware, xeon platinum 8276 firmware, xeon platinum 8276m firmware, xeon platinum 8276l firmware, xeon platinum 8280l firmware, xeon platinum 8260l firmware, xeon platinum 8280m firmware, xeon platinum 8260m firmware, xeon platinum 8280 firmware, xeon platinum 8260y firmware
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.