CVE-2019-11170
First published: Thu Nov 14 2019(Updated: )
Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel baseboard management controller firmware | <2.18 | |
| Intel BBS2600BPB | ||
| Intel Server Board S2600BPBR | ||
| Intel BBS2600BPQR | ||
| Intel BBS2600BPQR | ||
| Intel bbs2600bps | ||
| Intel bbs2600bpsr | ||
| Intel BBS2600STB | ||
| Intel BBS2600STBR | ||
| Intel BBS2600STQR | ||
| Intel BBS2600STQR | ||
| Intel HNS2600BPBR | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPBLC | ||
| Intel HNS2600BPBLC24 | ||
| Intel HNS2600BPBLC24R | ||
| Intel HNS2600BPBLCR | ||
| Intel HNS2600BPBR | ||
| Intel HNS2600BPBRX | ||
| Intel HNS2600WPQ | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQR | ||
| Intel HNS2600BPS Firmware | ||
| Intel HNS2600BPS24 | ||
| Intel hns2600bps24r | ||
| Intel hpchns2600bpsr | ||
| Intel HPCHNS2600BPBR | ||
| Intel hpchns2600bpqr | ||
| Intel hpchns2600bpsr | ||
| Intel HPCR1208WFQYSR | ||
| Intel hpcr1208wftysr | ||
| Intel Server System R1304WF0YSR | ||
| Intel Server System R1304WFTYSR | ||
| Intel hpcr2208wf0zsr | ||
| Intel hpcr2208wfqzsr | ||
| Intel hpcr2208wfqzsr | ||
| Intel hpcr2208wftzsrx | ||
| Intel hpcr2224wftzsr | ||
| Intel hpcr2308wftzsr | ||
| Intel Server System R2312WF0NPR | ||
| Intel hpcr2312wftzsr | ||
| Intel Server System r1208wfqysr | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1304WF0YS | ||
| Intel Server System R1304WF0YSR | ||
| Intel r1304wftys | ||
| Intel Server System R1304WFTYSR | ||
| Intel Server System R2208WF0ZS | ||
| Intel Server System R2208WF0ZSR | ||
| Intel R2208WFQZ | ||
| Intel R2208WFQZSR | ||
| Intel R2208WFTZS | ||
| Intel R2208WFTZSR | ||
| Intel R2208WFTZSR | ||
| Intel Server System R2224WFQZS | ||
| Intel r2224wftzs | ||
| Intel r2224wftzs | ||
| Intel R2308WFTZSR | ||
| Intel R2308WFTZS | ||
| Intel Server System R2312WF0NP | ||
| Intel Server System R2312WF0NPR | ||
| Intel R2312WFQZS | ||
| Intel R2312WFQZS | ||
| Intel Server System r2312wftzsr | ||
| Intel S2600STB | ||
| Intel S2600STBR Firmware | ||
| Intel s2600stq | ||
| Intel BBS2600STQR | ||
| Intel S2600WF0 | ||
| Intel s2600wf0r | ||
| Intel S2600WFQ | ||
| Intel S2600WFQR Firmware | ||
| Intel S2600WFT | ||
| Intel S2600WFTR Firmware | ||
| Intel s9232wk1hlc | ||
| Intel s9232wk2hac | ||
| Intel s9232wk2hlc | ||
| Intel s9248wk1hlc | ||
| Intel S9248WK2HAC | ||
| Intel s9248wk2hlc | ||
| Intel s9256wk1hlc |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-11170?
CVE-2019-11170 is rated as critical due to its potential for allowing unauthorized access and privilege escalation.
How do I fix CVE-2019-11170?
To fix CVE-2019-11170, apply the firmware update provided by Intel that addresses the vulnerability.
Which systems are affected by CVE-2019-11170?
CVE-2019-11170 affects certain versions of Intel Baseboard Management Controller firmware, specifically versions prior to 2.18.
Can CVE-2019-11170 be exploited remotely?
CVE-2019-11170 requires local access to exploit, making it less likely to be targeted remotely.
What types of attacks could exploit CVE-2019-11170?
Exploitation of CVE-2019-11170 could lead to information disclosure, privilege escalation, and denial of service.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel baseboard management controller firmware
- canonical/intel bbs2600bpb
- canonical/intel server board s2600bpbr
- canonical/intel bbs2600bpqr
- canonical/intel bbs2600bps
- canonical/intel bbs2600bpsr
- canonical/intel bbs2600stb
- canonical/intel bbs2600stbr
- canonical/intel bbs2600stqr
- canonical/intel hns2600bpbr
- canonical/intel hns2600bpb24r
- canonical/intel hns2600bpblc
- canonical/intel hns2600bpblc24
- canonical/intel hns2600bpblc24r
- canonical/intel hns2600bpblcr
- canonical/intel hns2600bpbrx
- canonical/intel hns2600wpq
- canonical/intel hns2600bpq24r
- canonical/intel hns2600bpqr
- canonical/intel hns2600bps firmware
- canonical/intel hns2600bps24
- canonical/intel hns2600bps24r
- canonical/intel hpchns2600bpsr
- canonical/intel hpchns2600bpbr
- canonical/intel hpchns2600bpqr
- canonical/intel hpcr1208wfqysr
- canonical/intel hpcr1208wftysr
- canonical/intel server system r1304wf0ysr
- canonical/intel server system r1304wftysr
- canonical/intel hpcr2208wf0zsr
- canonical/intel hpcr2208wfqzsr
- canonical/intel hpcr2208wftzsrx
- canonical/intel hpcr2224wftzsr
- canonical/intel hpcr2308wftzsr
- canonical/intel server system r2312wf0npr
- canonical/intel hpcr2312wftzsr
- canonical/intel server system r1208wfqysr
- canonical/intel server system r1208wftys
- canonical/intel server system r1304wf0ys
- canonical/intel r1304wftys
- canonical/intel server system r2208wf0zs
- canonical/intel server system r2208wf0zsr
- canonical/intel r2208wfqz
- canonical/intel r2208wfqzsr
- canonical/intel r2208wftzs
- canonical/intel r2208wftzsr
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel r2308wftzsr
- canonical/intel r2308wftzs
- canonical/intel server system r2312wf0np
- canonical/intel r2312wfqzs
- canonical/intel server system r2312wftzsr
- canonical/intel s2600stb
- canonical/intel s2600stbr firmware
- canonical/intel s2600stq
- canonical/intel s2600wf0
- canonical/intel s2600wf0r
- canonical/intel s2600wfq
- canonical/intel s2600wfqr firmware
- canonical/intel s2600wft
- canonical/intel s2600wftr firmware
- canonical/intel s9232wk1hlc
- canonical/intel s9232wk2hac
- canonical/intel s9232wk2hlc
- canonical/intel s9248wk1hlc
- canonical/intel s9248wk2hac
- canonical/intel s9248wk2hlc
- canonical/intel s9256wk1hlc