CVE-2019-11170 - Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access

Back Back to CVE browser

HIGH

Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access

Published Nov 14, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.40%

Description

Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.

Affected products

Vendor n/a Product Intel(R) BMC Default
n/a
- Version
  See provided reference
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Intel(R) BMC

n/a

Version	Status	Constraints
See provided reference	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2874
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2874		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html		x_refsource_MISCVendor Advisory