Vulnerability Description
Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Xeon E3-1585 Firmware | - |
| Intel | Xeon E3-1585 | 5 |
| Intel | Xeon E3-1585L Firmware | - |
| Intel | Xeon E3-1585L | 5 |
| Intel | Xeon E3-1578L Firmware | - |
| Intel | Xeon E3-1578L | 5 |
| Intel | Xeon E3-1575M Firmware | - |
| Intel | Xeon E3-1575M | 5 |
| Intel | Xeon E3-1565L Firmware | - |
| Intel | Xeon E3-1565L | 5 |
| Intel | Xeon E3-1558L Firmware | - |
| Intel | Xeon E3-1558L | 5 |
| Intel | Xeon E3-1545M Firmware | - |
| Intel | Xeon E3-1545M | 5 |
| Intel | Xeon E3-1535M Firmware | - |
| Intel | Xeon E3-1535M | 5 |
| Intel | Xeon E3-1515M Firmware | - |
| Intel | Xeon E3-1515M | 5 |
| Intel | Xeon E3-1505M Firmware | - |
| Intel | Xeon E3-1505M | 5 |
References
- https://security.netapp.com/advisory/ntap-20191217-0001/Third Party Advisory
- https://support.f5.com/csp/article/K10321239?utm_source=f5support&%3Butm_medi
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00289.Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191217-0001/Third Party Advisory
- https://support.f5.com/csp/article/K10321239?utm_source=f5support&%3Butm_medi
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00289.Third Party Advisory
FAQ
What is CVE-2019-11157?
CVE-2019-11157 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.
How severe is CVE-2019-11157?
CVE-2019-11157 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-11157?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon E3-1585 Firmware, Intel Xeon E3-1585, Intel Xeon E3-1585L Firmware, Intel Xeon E3-1585L, Intel Xeon E3-1578L Firmware.