Vulnerability Description
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Baseboard Management Controller Firmware | < 2.18 |
| Intel | Bbs2600Bpb | - |
| Intel | Bbs2600Bpbr | - |
| Intel | Bbs2600Bpq | - |
| Intel | Bbs2600Bpqr | - |
| Intel | Bbs2600Bps | - |
| Intel | Bbs2600Bpsr | - |
| Intel | Bbs2600Stb | - |
| Intel | Bbs2600Stbr | - |
| Intel | Bbs2600Stq | - |
| Intel | Bbs2600Stqr | - |
| Intel | Hns2600Bpb | - |
| Intel | Hns2600Bpb24 | - |
| Intel | Hns2600Bpb24R | - |
| Intel | Hns2600Bpb24Rx | - |
| Intel | Hns2600Bpblc | - |
| Intel | Hns2600Bpblc24 | - |
| Intel | Hns2600Bpblc24R | - |
| Intel | Hns2600Bpblcr | - |
| Intel | Hns2600Bpbr | - |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
FAQ
What is CVE-2019-11173?
CVE-2019-11173 is a vulnerability with a CVSS score of 7.1 (HIGH). Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local a...
How severe is CVE-2019-11173?
CVE-2019-11173 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-11173?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Baseboard Management Controller Firmware, Intel Bbs2600Bpb, Intel Bbs2600Bpbr, Intel Bbs2600Bpq, Intel Bbs2600Bpqr.