Back to the CVE list
CVE-2019-11137

Vulnerability in N/a 2019.2 IPU – UEFI

CVSS score

8.2

EPSS probability

%0.4

Risk score

0.0

Published

7 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2019-11137 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2019-11137 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1n/a2019.2 IPU – UEFI View
2intelxeon platinum 8253 firmware View
3intelxeon platinum 8253 View
4intelxeon platinum 8256 firmware View
5intelxeon platinum 8256 View
6intelxeon platinum 8260 firmware View
7intelxeon platinum 8260 View
8intelxeon platinum 8276 firmware View
9intelxeon platinum 8276 View
10intelxeon platinum 8276m firmware View
11intelxeon platinum 8276m View
12intelxeon platinum 8276l firmware View
13intelxeon platinum 8276l View
14intelxeon platinum 8280l firmware View
15intelxeon platinum 8280l View
16intelxeon platinum 8260l firmware View
17intelxeon platinum 8260l View
18intelxeon platinum 8280m firmware View
19intelxeon platinum 8280m View
20intelxeon platinum 8260m firmware View
21intelxeon platinum 8260m View
22intelxeon platinum 8280 firmware View
23intelxeon platinum 8280 View
24intelxeon platinum 8260y firmware View
25intelxeon platinum 8260y View
26intelxeon platinum 8268 firmware View
27intelxeon platinum 8268 View
28intelxeon platinum 8270 firmware View
29intelxeon platinum 8270 View
30intelxeon platinum 8274 firmware View
31intelxeon platinum 8274 View
32intelxeon platinum 8284 firmware View
33intelxeon platinum 8284 View
34intelxeon platinum 9242 firmware View
35intelxeon platinum 9242 View
36intelxeon platinum 9282 firmware View
37intelxeon platinum 9282 View
38intelxeon platinum 8153 firmware View
39intelxeon platinum 8153 View
40intelxeon platinum 8156 firmware View
41intelxeon platinum 8156 View
42intelxeon platinum 8158 firmware View
43intelxeon platinum 8158 View
44intelxeon platinum 8176 firmware View
45intelxeon platinum 8176 View
46intelxeon platinum 8160 firmware View
47intelxeon platinum 8160 View
48intelxeon platinum 8164 firmware View
49intelxeon platinum 8164 View
50intelxeon platinum 8168 firmware View
51intelxeon platinum 8168 View
52intelxeon platinum 8170 firmware View
53intelxeon platinum 8170 View
54intelxeon platinum 8180 firmware View
55intelxeon platinum 8180 View
56intelxeon platinum 8160t firmware View
57intelxeon platinum 8160t View
58intelxeon platinum 8160f firmware View
59intelxeon platinum 8160f View
60intelxeon platinum 8176f firmware View
61intelxeon platinum 8176f View
62intelxeon gold 6210u firmware View
63intelxeon gold 6210u View
64intelxeon gold 6244 firmware View
65intelxeon gold 6244 View
66intelxeon gold 6212u firmware View
67intelxeon gold 6212u View
68intelxeon gold 6240 firmware View
69intelxeon gold 6240 View
70intelxeon gold 5218 firmware View
71intelxeon gold 5218 View
72intelxeon gold 6230 firmware View
73intelxeon gold 6230 View
74intelxeon gold 5222 firmware View
75intelxeon gold 5222 View
76intelxeon gold 6238t firmware View
77intelxeon gold 6238t View
78intelxeon gold 6248 firmware View
79intelxeon gold 6248 View
80intelxeon gold 6252 firmware View
81intelxeon gold 6252 View
82intelxeon gold 6242 firmware View
83intelxeon gold 6242 View
84intelxeon gold 6240y firmware View
85intelxeon gold 6240y View
86intelxeon gold 5217 firmware View
87intelxeon gold 5217 View
88intelxeon gold 6238m firmware View
89intelxeon gold 6238m View
90intelxeon gold 5218n firmware View
91intelxeon gold 5218n View
92intelxeon gold 6226 firmware View
93intelxeon gold 6226 View
94intelxeon gold 6254 firmware View
95intelxeon gold 6254 View
96intelxeon gold 5220 firmware View
97intelxeon gold 5220 View
98intelxeon gold 6238l firmware View
99intelxeon gold 6238l View
100intelxeon gold 5218b firmware View
101intelxeon gold 5218b View
102intelxeon gold 6240l firmware View
103intelxeon gold 6240l View
104intelxeon gold 6238 firmware View
105intelxeon gold 6238 View
106intelxeon gold 6240m firmware View
107intelxeon gold 6240m View
108intelxeon gold 5220s firmware View
109intelxeon gold 5220s View
110intelxeon gold 5215 firmware View
111intelxeon gold 5215 View
112intelxeon gold 6222v firmware View
113intelxeon gold 6222v View
114intelxeon gold 6252n firmware View
115intelxeon gold 6252n View
116intelxeon gold 5215m firmware View
117intelxeon gold 5215m View
118intelxeon gold 6246 firmware View
119intelxeon gold 6246 View
120intelxeon gold 5215l firmware View
121intelxeon gold 5215l View
122intelxeon gold 5218t firmware View
123intelxeon gold 5218t View
124intelxeon gold 5220t firmware View
125intelxeon gold 5220t View
126intelxeon gold 6209u firmware View
127intelxeon gold 6209u View
128intelxeon gold 6262v firmware View
129intelxeon gold 6262v View
130intelxeon gold 5122 firmware View
131intelxeon gold 5122 View
132intelxeon gold 6138 firmware View
133intelxeon gold 6138 View
134intelxeon gold 6148 firmware View
135intelxeon gold 6148 View
136intelxeon gold 5120t firmware View
137intelxeon gold 5120t View
138intelxeon gold 6136 firmware View
139intelxeon gold 6136 View
140intelxeon gold 6150 firmware View
141intelxeon gold 6150 View
142intelxeon gold 6152 firmware View
143intelxeon gold 6152 View
144intelxeon gold 6130 firmware View
145intelxeon gold 6130 View
146intelxeon gold 6128 firmware View
147intelxeon gold 6128 View
148intelxeon gold 5118 firmware View
149intelxeon gold 5118 View
150intelxeon gold 6134 firmware View
151intelxeon gold 6134 View
152intelxeon gold 6126 firmware View
153intelxeon gold 6126 View
154intelxeon gold 5120 firmware View
155intelxeon gold 5120 View
156intelxeon gold 5115 firmware View
157intelxeon gold 5115 View
158intelxeon gold 6154 firmware View
159intelxeon gold 6154 View
160intelxeon gold 6140 firmware View
161intelxeon gold 6140 View
162intelxeon gold 6140m firmware View
163intelxeon gold 6140m View
164intelxeon gold 6132 firmware View
165intelxeon gold 6132 View
166intelxeon gold 6138t firmware View
167intelxeon gold 6138t View
168intelxeon gold 6142f firmware View
169intelxeon gold 6142f View
170intelxeon gold 6130t firmware View
171intelxeon gold 6130t View
172intelxeon gold 6138f firmware View
173intelxeon gold 6138f View
174intelxeon gold 6130f firmware View
175intelxeon gold 6130f View
176intelxeon gold 6126t firmware View
177intelxeon gold 6126t View
178intelxeon gold 6126f firmware View
179intelxeon gold 6126f View
180intelxeon gold 6148f firmware View
181intelxeon gold 6148f View
182intelxeon gold 6146 firmware View
183intelxeon gold 6146 View
184intelxeon gold 6144 firmware View
185intelxeon gold 6144 View
186intelxeon silver 4209t firmware View
187intelxeon silver 4209t View
188intelxeon silver 4210 firmware View
189intelxeon silver 4210 View
190intelxeon silver 4214 firmware View
191intelxeon silver 4214 View
192intelxeon silver 4214y firmware View
193intelxeon silver 4214y View
194intelxeon silver 4215 firmware View
195intelxeon silver 4215 View
196intelxeon silver 4208 firmware View
197intelxeon silver 4208 View
198intelxeon silver 4216 firmware View
199intelxeon silver 4216 View
200intelxeon silver 4116 firmware View
Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.2CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HNVD
4.6CVSS V2—AV:L/AC:L/Au:N/C:P/I:P/A:PNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2019-11137 is associated with the following CWEs:

CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2019-11137 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.htmlvendor-advisoryhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_usvendor-advisoryhttps://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSSvendor-advisory

CVSS Vector Radar Chart

8.2 / 10
Attack VectorLocalComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

N
n/a logo
n/a
I
intel logo
intel

Weakness Type (CWE & CAPEC)

CWE-20

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-11137"