Vulnerability Description
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Baseboard Management Controller Firmware | < 2.18 |
| Intel | Bbs2600Bpb | - |
| Intel | Bbs2600Bpbr | - |
| Intel | Bbs2600Bpq | - |
| Intel | Bbs2600Bpqr | - |
| Intel | Bbs2600Bps | - |
| Intel | Bbs2600Bpsr | - |
| Intel | Bbs2600Stb | - |
| Intel | Bbs2600Stbr | - |
| Intel | Bbs2600Stq | - |
| Intel | Bbs2600Stqr | - |
| Intel | Hns2600Bpb | - |
| Intel | Hns2600Bpb24 | - |
| Intel | Hns2600Bpb24R | - |
| Intel | Hns2600Bpb24Rx | - |
| Intel | Hns2600Bpblc | - |
| Intel | Hns2600Bpblc24 | - |
| Intel | Hns2600Bpblc24R | - |
| Intel | Hns2600Bpblcr | - |
| Intel | Hns2600Bpbr | - |
References
- https://support.f5.com/csp/article/K64346530?utm_source=f5support&%3Butm_medi
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
- https://support.f5.com/csp/article/K64346530?utm_source=f5support&%3Butm_medi
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
FAQ
What is CVE-2019-11168?
CVE-2019-11168 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network...
How severe is CVE-2019-11168?
CVE-2019-11168 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-11168?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Baseboard Management Controller Firmware, Intel Bbs2600Bpb, Intel Bbs2600Bpbr, Intel Bbs2600Bpq, Intel Bbs2600Bpqr.