Proliant Xl730F Gen9 Server Firmware
CVE-2019-11136
MEDIUM
2019-11-14
secure@intel.com
Privilege Escalation
Denial Of Service
Information Disclosure
Intel
Proliant Xl730F Gen9 Server Firmware
Proliant Xl450 Gen9 Server Firmware
Proliant Xl250A Gen9 Server Firmware
Proliant Xl230A Gen9 Server Firmware
Proliant Xl190R Gen9 Server Firmware
Proliant Xl170R Gen9 Server Firmware
Proliant Dl560 Gen9 Server Firmware
Proliant Dl380 Gen9 Server Firmware
Proliant Dl360 Gen9 Server Firmware
Proliant Dl180 Gen9 Server Firmware
Proliant Dl160 Gen9 Server Firmware
Proliant Dl120 Gen9 Server Firmware
Proliant Dl80 Gen9 Server Firmware
Proliant Dl60 Gen9 Server Firmware
Proliant Ml350 Gen9 Server Firmware
Proliant Ml150 Gen9 Server Firmware
Proliant Ml110 Gen9 Server Firmware
Proliant Bl660C Gen9 Server Firmware
Proliant Bl460C Gen9 Server Blade Firmware
Xeon D 1649N Firmware
Xeon D 1633N Firmware
Xeon D 1637 Firmware
Xeon D 1627 Firmware
Xeon D 1623N Firmware
Xeon D 1622 Firmware
Xeon D 1653N Firmware
Xeon D 1602 Firmware
Xeon D 2141I Firmware
Xeon D 2177Nt Firmware
Xeon D 2161I Firmware
Xeon D 2143It Firmware
Xeon D 2146Nt Firmware
Xeon D 2145Nt Firmware
Xeon D 2123It Firmware
Xeon D 2173It Firmware
Xeon D 2191 Firmware
Xeon D 2187Nt Firmware
Xeon D 2142It Firmware
Xeon D 2163It Firmware
Xeon D 2183It Firmware
Xeon D 2166Nt Firmware
Xeon D 1513N Firmware
Xeon D 1533N Firmware
Xeon D 1553N Firmware
Xeon D 1523N Firmware
Xeon D 1543N Firmware
Xeon D 1559 Firmware
Xeon D 1529 Firmware
Xeon D 1539 Firmware
Xeon D 1567 Firmware
Xeon D 1557 Firmware
Xeon D 1577 Firmware
Xeon D 1571 Firmware
Xeon D 1528 Firmware
Xeon D 1541 Firmware
Xeon D 1518 Firmware
Xeon D 1521 Firmware
Xeon D 1531 Firmware
Xeon D 1548 Firmware
Xeon D 1527 Firmware
Xeon D 1537 Firmware
Xeon D 1540 Firmware
Xeon D 1520 Firmware
Xeon E5 2699A V4 Firmware
Xeon E5 4610 V4 Firmware
Xeon E5 4620 V4 Firmware
Xeon E5 4627 V4 Firmware
Xeon E5 4628L V4 Firmware
Xeon E5 4640 V4 Firmware
Xeon E5 4650 V4 Firmware
Xeon E5 4655 V4 Firmware
Xeon E5 4660 V4 Firmware
Xeon E5 4667 V4 Firmware
Xeon E5 4669 V4 Firmware
Xeon E5 1620 V4 Firmware
Xeon E5 1630 V4 Firmware
Xeon E5 1650 V4 Firmware
Xeon E5 1660 V4 Firmware
Xeon E5 1680 V4 Firmware
Xeon E5 2603 V4 Firmware
Xeon E5 2608L V4 Firmware
Xeon E5 2609 V4 Firmware
Xeon E5 2618L V4 Firmware
Xeon E5 2620 V4 Firmware
Xeon E5 2623 V4 Firmware
Xeon E5 2628L V4 Firmware
Xeon E5 2630 V4 Firmware
Xeon E5 2630L V4 Firmware
Xeon E5 2637 V4 Firmware
Xeon E5 2640 V4 Firmware
Xeon E5 2643 V4 Firmware
Xeon E5 2648L V4 Firmware
Xeon E5 2650 V4 Firmware
Xeon E5 2650L V4 Firmware
Xeon E5 2658 V4 Firmware
Xeon E5 2660 V4 Firmware
Xeon E5 2667 V4 Firmware
Xeon E5 2680 V4 Firmware
Xeon E5 2683 V4 Firmware
Xeon E5 2687W V4 Firmware
Xeon E5 2690 V4 Firmware
Xeon E5 2695 V4 Firmware
Xeon E5 2697 V4 Firmware
Xeon E5 2697A V4 Firmware
Xeon E5 2698 V4 Firmware
Xeon E5 2699 V4 Firmware
Xeon E7 8894 V4 Firmware
Xeon E7 4809 V4 Firmware
Xeon E7 4820 V4 Firmware
Xeon E7 4830 V4 Firmware
Xeon E7 4850 V4 Firmware
Xeon E7 8860 V4 Firmware
Xeon E7 8867 V4 Firmware
Xeon E7 8870 V4 Firmware
Xeon E7 8880 V4 Firmware
Xeon E7 8890 V4 Firmware
Xeon E7 8891 V4 Firmware
Xeon E7 8893 V4 Firmware
Xeon Platinum 8253 Firmware
Xeon Platinum 8256 Firmware
Xeon Platinum 8260 Firmware
Xeon Platinum 8276 Firmware
Xeon Platinum 8276M Firmware
Xeon Platinum 8276L Firmware
Xeon Platinum 8280L Firmware
Xeon Platinum 8260L Firmware
Xeon Platinum 8280M Firmware
Xeon Platinum 8260M Firmware
Xeon Platinum 8280 Firmware
Xeon Platinum 8260Y Firmware
Xeon Platinum 8268 Firmware
Xeon Platinum 8270 Firmware
Xeon Platinum 8274 Firmware
Xeon Platinum 8284 Firmware
Xeon Platinum 9242 Firmware
Xeon Platinum 9282 Firmware
Xeon Platinum 8153 Firmware
Xeon Platinum 8156 Firmware
Xeon Platinum 8158 Firmware
Xeon Platinum 8176 Firmware
Xeon Platinum 8160 Firmware
Xeon Platinum 8164 Firmware
Xeon Platinum 8168 Firmware
Xeon Platinum 8170 Firmware
Xeon Platinum 8180 Firmware
Xeon Platinum 8160T Firmware
Xeon Platinum 8160F Firmware
Xeon Platinum 8176F Firmware
Xeon Gold 6210U Firmware
Xeon Gold 6244 Firmware
Xeon Gold 6212U Firmware
Xeon Gold 6240 Firmware
Xeon Gold 5218 Firmware
Xeon Gold 6230 Firmware
Xeon Gold 5222 Firmware
Xeon Gold 6238T Firmware
Xeon Gold 6248 Firmware
Xeon Gold 6252 Firmware
Xeon Gold 6242 Firmware
Xeon Gold 6240Y Firmware
Xeon Gold 5217 Firmware
Xeon Gold 6238M Firmware
Xeon Gold 5218N Firmware
Xeon Gold 6226 Firmware
Xeon Gold 6254 Firmware
Xeon Gold 5220 Firmware
Xeon Gold 6238L Firmware
Xeon Gold 5218B Firmware
Xeon Gold 6240L Firmware
Xeon Gold 6238 Firmware
Xeon Gold 6240M Firmware
Xeon Gold 5220S Firmware
Xeon Gold 5215 Firmware
Xeon Gold 6222V Firmware
Xeon Gold 6252N Firmware
Xeon Gold 5215M Firmware
Xeon Gold 6246 Firmware
Xeon Gold 5215L Firmware
Xeon Gold 5218T Firmware
Xeon Gold 5220T Firmware
Xeon Gold 6209U Firmware
Xeon Gold 6262V Firmware
Xeon Gold 5122 Firmware
Xeon Gold 6138 Firmware
Xeon Gold 6148 Firmware
Xeon Gold 5120T Firmware
Xeon Gold 6136 Firmware
Xeon Gold 6150 Firmware
Xeon Gold 6152 Firmware
Xeon Gold 6130 Firmware
Xeon Gold 6128 Firmware
Xeon Gold 5118 Firmware
Xeon Gold 6134 Firmware
Xeon Gold 6126 Firmware
Xeon Gold 5120 Firmware
Xeon Gold 5115 Firmware
Xeon Gold 6154 Firmware
Xeon Gold 6140 Firmware
Xeon Gold 6140M Firmware
Xeon Gold 6132 Firmware
Xeon Gold 6138T Firmware
Xeon Gold 6142F Firmware
Xeon Gold 6130T Firmware
Xeon Gold 6138F Firmware
Xeon Gold 6130F Firmware
Xeon Gold 6126T Firmware
Xeon Gold 6126F Firmware
Xeon Gold 6148F Firmware
Xeon Gold 6146 Firmware
Xeon Gold 6144 Firmware
Xeon Silver 4209T Firmware
Xeon Silver 4210 Firmware
Xeon Silver 4214 Firmware
Xeon Silver 4214Y Firmware
Xeon Silver 4215 Firmware
Xeon Silver 4208 Firmware
Xeon Silver 4216 Firmware
Xeon Silver 4116 Firmware
Xeon Silver 4109T Firmware
Xeon Silver 4114 Firmware
Xeon Silver 4112 Firmware
Xeon Silver 4108 Firmware
Xeon Silver 4110 Firmware
Xeon Bronze 3204 Firmware
Xeon Bronze 3106 Firmware
Xeon Bronze 3104 Firmware
Atom C3308 Firmware
Atom C3336 Firmware
Atom C3338 Firmware
Atom C3508 Firmware
Atom C3538 Firmware
Atom C3558 Firmware
Atom C3708 Firmware
Atom C3750 Firmware
Atom C3758 Firmware
Atom C3808 Firmware
Atom C3850 Firmware
Atom C3858 Firmware
Atom C3830 Firmware
Atom C3950 Firmware
Atom C3955 Firmware
Atom C3958 Firmware
Atom C2758 Firmware
Atom C2738 Firmware
Atom C2718 Firmware
Atom C2558 Firmware
Atom C2538 Firmware
Atom C2518 Firmware
Atom C2508 Firmware
Atom C2358 Firmware
Atom C2338 Firmware
Atom C2308 Firmware
Atom C2750 Firmware
Atom C2730 Firmware
Atom C2550 Firmware
Atom C2530 Firmware
Atom C2516 Firmware
Atom C2350 Firmware
Atom C2316 Firmware
Apollo 4200 Gen10 Server Firmware
Proliant Bl460C Gen10 Server Blade Firmware
Proliant Dl580 Gen10 Server Firmware
Proliant Dl560 Gen10 Server Firmware
Proliant Dl380 Gen10 Server Firmware
Proliant Dl360 Gen10 Server Firmware
Proliant Dl180 Gen10 Server Firmware
Proliant Dl160 Gen10 Server Firmware
Proliant Dl120 Gen10 Server Firmware
Proliant Ml350 Gen10 Server Firmware
Proliant Ml110 Gen10 Server Firmware
Proliant Xl450 Gen10 Server Firmware
Proliant Xl270D Gen10 Server Firmware
Proliant Xl230K Gen10 Server Firmware
Proliant Xl190R Gen10 Server Firmware
Proliant Xl170R Gen10 Server Firmware
Proliant E910 Server Blade Firmware
Synergy 660 Gen10 Compute Module Firmware
Synergy 480 Gen10 Compute Module Firmware
Proliant Dl580 Gen9 Server Firmware
Synergy 680 Gen9 Compute Module Firmware
Synergy 620 Gen9 Compute Module Firmware
Synergy 480 Gen9 Compute Module Firmware
Apollo 4200 Gen9 Server Firmware
Proliant Ws460C Gen9 Graphics Server Blade Firmware
Hpe
6.7
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
6.7
MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
1
CVE Published
Nov 14, 2019 - 17:15 nvd
MEDIUM 6.7
DescriptionNVD
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
AnalysisAI
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. Affected products include: Intel Xeon Platinum 8253 Firmware, Intel Xeon Platinum 8256 Firmware, Intel Xeon Platinum 8260 Firmware, Intel Xeon Platinum 8276 Firmware, Intel Xeon Platinum 8276M Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
CVE-2019-11137
HIGH
8.2
Nov 14
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D
CVE-2018-7112
MEDIUM
5.5
Dec 03
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of pri
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).