Vulnerabilities > CVE-2019-11136
Attack vector
LOCAL Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Vulnerable Configurations
References
- https://support.f5.com/csp/article/K56215245?utm_source=f5support&%3Butm_medium=RSS
- https://support.f5.com/csp/article/K56215245?utm_source=f5support&%3Butm_medium=RSS
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html