CVE-2019-11181
First published: Thu Nov 14 2019(Updated: )
Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Baseboard Management Controller Firmware | <2.18 | |
| Intel BBS2600BPB | ||
| Intel Server Board S2600BPBR | ||
| Intel BBS2600BPQR | ||
| Intel BBS2600 | ||
| Intel BBS2600BPS | ||
| Intel HNS2600 Series | ||
| Intel BBS2600STB | ||
| Intel BBS2600STBR | ||
| Intel BBS2600STQR | ||
| Intel BBS2600STQR | ||
| Intel HNS2600BPBR | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPBLC | ||
| Intel HNS2600 | ||
| Intel HNS2600BPBLC24R | ||
| Intel HNS2600BPBLCR | ||
| Intel HNS | ||
| Intel HNS2600BPBRX | ||
| Intel HNS2600WPQ | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQR | ||
| Intel HNS2600BPS Firmware | ||
| Intel HNS2600BPS24R | ||
| Intel HNS2600 BPS24 | ||
| Intel hpchns2600bpsr | ||
| Intel HNS2600 Series | ||
| Intel HNS2600BPQR | ||
| Intel HNS2600 Series | ||
| Intel HPCR1208WFQYSR | ||
| Intel Server System R2308WFTZSR | ||
| Intel Server System R1304WF0YSR | ||
| Intel Server System R1304WFTYSR | ||
| Intel hpcr2208wf0zsr | ||
| Intel Server System R2208WFQZSR | ||
| Intel hpcr2208wfqzsr | ||
| Intel Server System R2208WFTZSR | ||
| Intel hpcr2224wftzsr | ||
| Intel R2308WFTZSR | ||
| Intel Server System R2312WF0NPR | ||
| Intel hpcr2312wftzsr | ||
| Intel HPCR1208WFQYSR | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1304WF0YS | ||
| Intel Server System R1304WF0YSR | ||
| Intel Server System R1304WFTYS | ||
| Intel Server System R1304WFTYSR | ||
| Intel Server System R2208WF0ZS | ||
| Intel Server System R2208WF0ZSR | ||
| Intel R2208WFQZ | ||
| Intel Server System R2208WFQZSR | ||
| Intel R2208WFTZS | ||
| Intel Server System R2208WFTZSR | ||
| Intel R2208WFTZSR | ||
| Intel Server System R2224WFQZS | ||
| Intel R2224WFTZS | ||
| Intel r2224wftzs | ||
| Intel Server System R2308WFTZS | ||
| Intel Server System R2308WFTZSR | ||
| Intel Server System R2312WF0NP | ||
| Intel Server System R2312WF0NPR | ||
| Intel Server System R2312WFQZS | ||
| Intel R2312WFQZS | ||
| Intel Server System r2312wftzsr | ||
| Intel Server Board S2600STB | ||
| Intel S2600STBR Firmware | ||
| Intel S2600STQR Firmware | ||
| Intel BBS2600STQR | ||
| Intel Server Board S2600WF0 | ||
| Intel Server Board S2600WF0R | ||
| Intel Server Board S2600WFQ | ||
| Intel S2600WFQR Firmware | ||
| Intel Server Board S2600WFT | ||
| Intel S2600WFTR Firmware | ||
| Intel Server System S9200WK | ||
| Intel SSD S9230 Series | ||
| Intel SSD Pro 5400s | ||
| Intel Server System S9200WK | ||
| Intel SSD 540s | ||
| Intel SSD Pro 5400s | ||
| Intel Server System S9256WK1HLC |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-11181?
CVE-2019-11181 has been classified as a high-severity vulnerability due to its potential for escalation of privilege.
How do I fix CVE-2019-11181?
Updating the Intel Baseboard Management Controller firmware to the latest version, beyond 2.18, addresses the vulnerability in CVE-2019-11181.
Who is affected by CVE-2019-11181?
CVE-2019-11181 affects systems utilizing vulnerable versions of Intel Baseboard Management Controller firmware, specifically those below version 2.18.
What are the potential impacts of CVE-2019-11181?
CVE-2019-11181 may allow unauthenticated users to escalate privileges via network access, compromising system integrity.
How can I determine if my system is vulnerable to CVE-2019-11181?
To determine vulnerability to CVE-2019-11181, check the version of your Intel Baseboard Management Controller firmware and compare it with the patched version.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel baseboard management controller firmware
- canonical/intel bbs2600bpb
- canonical/intel server board s2600bpbr
- canonical/intel bbs2600bpqr
- canonical/intel bbs2600
- canonical/intel bbs2600bps
- canonical/intel hns2600 series
- canonical/intel bbs2600stb
- canonical/intel bbs2600stbr
- canonical/intel bbs2600stqr
- canonical/intel hns2600bpbr
- canonical/intel hns2600bpb24r
- canonical/intel hns2600bpblc
- canonical/intel hns2600
- canonical/intel hns2600bpblc24r
- canonical/intel hns2600bpblcr
- canonical/intel hns
- canonical/intel hns2600bpbrx
- canonical/intel hns2600wpq
- canonical/intel hns2600bpq24r
- canonical/intel hns2600bpqr
- canonical/intel hns2600bps firmware
- canonical/intel hns2600bps24r
- canonical/intel hns2600 bps24
- canonical/intel hpchns2600bpsr
- canonical/intel hpcr1208wfqysr
- canonical/intel server system r2308wftzsr
- canonical/intel server system r1304wf0ysr
- canonical/intel server system r1304wftysr
- canonical/intel hpcr2208wf0zsr
- canonical/intel server system r2208wfqzsr
- canonical/intel hpcr2208wfqzsr
- canonical/intel server system r2208wftzsr
- canonical/intel hpcr2224wftzsr
- canonical/intel r2308wftzsr
- canonical/intel server system r2312wf0npr
- canonical/intel hpcr2312wftzsr
- canonical/intel server system r1208wftys
- canonical/intel server system r1304wf0ys
- canonical/intel server system r1304wftys
- canonical/intel server system r2208wf0zs
- canonical/intel server system r2208wf0zsr
- canonical/intel r2208wfqz
- canonical/intel r2208wftzs
- canonical/intel r2208wftzsr
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel server system r2308wftzs
- canonical/intel server system r2312wf0np
- canonical/intel server system r2312wfqzs
- canonical/intel r2312wfqzs
- canonical/intel server system r2312wftzsr
- canonical/intel server board s2600stb
- canonical/intel s2600stbr firmware
- canonical/intel s2600stqr firmware
- canonical/intel server board s2600wf0
- canonical/intel server board s2600wf0r
- canonical/intel server board s2600wfq
- canonical/intel s2600wfqr firmware
- canonical/intel server board s2600wft
- canonical/intel s2600wftr firmware
- canonical/intel server system s9200wk
- canonical/intel ssd s9230 series
- canonical/intel ssd pro 5400s
- canonical/intel ssd 540s
- canonical/intel server system s9256wk1hlc