CVE-2019-11137

Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Score

CVSS 3.1 8.2 High

Status

Modified - secure@intel.com

Published

2019-11-14

Last modified

2026-10-08

Weaknesses

CWE-20

Affected products

• Apollo 4200 Gen10 Server Firmware (Hpe)
• Apollo 4200 Gen9 Server Firmware (Hpe)
• Proliant Bl460c Gen10 Server Blade Firmware (Hpe)
• Proliant Bl460c Gen9 Server Blade Firmware (Hpe)
• Proliant Bl660c Gen9 Server Firmware (Hpe)
• Proliant Dl120 Gen10 Server Firmware (Hpe)
• Proliant Dl120 Gen9 Server Firmware (Hpe)
• Proliant Dl160 Gen10 Server Firmware (Hpe)
• Proliant Dl160 Gen9 Server Firmware (Hpe)
• Proliant Dl180 Gen10 Server Firmware (Hpe)
• Proliant Dl180 Gen9 Server Firmware (Hpe)
• Proliant Dl360 Gen10 Server Firmware (Hpe)
• Proliant Dl360 Gen9 Server Firmware (Hpe)
• Proliant Dl380 Gen10 Server Firmware (Hpe)
• Proliant Dl380 Gen9 Server Firmware (Hpe)
• Proliant Dl560 Gen10 Server Firmware (Hpe)
• Proliant Dl560 Gen9 Server Firmware (Hpe)
• Proliant Dl580 Gen10 Server Firmware (Hpe)
• Proliant Dl580 Gen9 Server Firmware (Hpe)
• Proliant Dl60 Gen9 Server Firmware (Hpe)
• Proliant Dl80 Gen9 Server Firmware (Hpe)
• Proliant E910 Server Blade Firmware (Hpe)
• Proliant Ml110 Gen10 Server Firmware (Hpe)
• Proliant Ml110 Gen9 Server Firmware (Hpe)
• Proliant Ml150 Gen9 Server Firmware (Hpe)
• Proliant Ml350 Gen10 Server Firmware (Hpe)
• Proliant Ml350 Gen9 Server Firmware (Hpe)
• Proliant Ws460c Gen9 Graphics Server Blade Firmware (Hpe)
• Proliant Xl170r Gen10 Server Firmware (Hpe)
• Proliant Xl170r Gen9 Server Firmware (Hpe)
• Proliant Xl190r Gen10 Server Firmware (Hpe)
• Proliant Xl190r Gen9 Server Firmware (Hpe)
• Proliant Xl230a Gen9 Server Firmware (Hpe)
• Proliant Xl230k Gen10 Server Firmware (Hpe)
• Proliant Xl250a Gen9 Server Firmware (Hpe)
• Proliant Xl270d Gen10 Server Firmware (Hpe)
• Proliant Xl450 Gen10 Server Firmware (Hpe)
• Proliant Xl450 Gen9 Server Firmware (Hpe)
• Proliant Xl730f Gen9 Server Firmware (Hpe)
• Synergy 480 Gen10 Compute Module Firmware (Hpe)
• Synergy 480 Gen9 Compute Module Firmware (Hpe)
• Synergy 620 Gen9 Compute Module Firmware (Hpe)
• Synergy 660 Gen10 Compute Module Firmware (Hpe)
• Synergy 680 Gen9 Compute Module Firmware (Hpe)
• Atom C2308 Firmware (Intel)
• Atom C2316 Firmware (Intel)
• Atom C2338 Firmware (Intel)
• Atom C2350 Firmware (Intel)
• Atom C2358 Firmware (Intel)
• Atom C2508 Firmware (Intel)
• Atom C2516 Firmware (Intel)
• Atom C2518 Firmware (Intel)
• Atom C2530 Firmware (Intel)
• Atom C2538 Firmware (Intel)
• Atom C2550 Firmware (Intel)
• Atom C2558 Firmware (Intel)
• Atom C2718 Firmware (Intel)
• Atom C2730 Firmware (Intel)
• Atom C2738 Firmware (Intel)
• Atom C2750 Firmware (Intel)
• Atom C2758 Firmware (Intel)
• Atom C3308 Firmware (Intel)
• Atom C3336 Firmware (Intel)
• Atom C3338 Firmware (Intel)
• Atom C3508 Firmware (Intel)
• Atom C3538 Firmware (Intel)
• Atom C3558 Firmware (Intel)
• Atom C3708 Firmware (Intel)
• Atom C3750 Firmware (Intel)
• Atom C3758 Firmware (Intel)
• Atom C3808 Firmware (Intel)
• Atom C3830 Firmware (Intel)
• Atom C3850 Firmware (Intel)
• Atom C3858 Firmware (Intel)
• Atom C3950 Firmware (Intel)
• Atom C3955 Firmware (Intel)
• Atom C3958 Firmware (Intel)
• Xeon Bronze 3104 Firmware (Intel)
• Xeon Bronze 3106 Firmware (Intel)
• Xeon Bronze 3204 Firmware (Intel)
• Xeon D-1513n Firmware (Intel)
• Xeon D-1518 Firmware (Intel)
• Xeon D-1520 Firmware (Intel)
• Xeon D-1521 Firmware (Intel)
• Xeon D-1523n Firmware (Intel)
• Xeon D-1527 Firmware (Intel)
• Xeon D-1528 Firmware (Intel)
• Xeon D-1529 Firmware (Intel)
• Xeon D-1531 Firmware (Intel)
• Xeon D-1533n Firmware (Intel)
• Xeon D-1537 Firmware (Intel)
• Xeon D-1539 Firmware (Intel)
• Xeon D-1540 Firmware (Intel)
• Xeon D-1541 Firmware (Intel)
• Xeon D-1543n Firmware (Intel)
• Xeon D-1548 Firmware (Intel)
• Xeon D-1553n Firmware (Intel)
• Xeon D-1557 Firmware (Intel)
• Xeon D-1559 Firmware (Intel)
• Xeon D-1567 Firmware (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
• https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS