CVE-2019-0139
published 2019-11-14CVE-2019-0139: Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an…
PriorityP424medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.32%
23.8th percentile
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | ethernet_700_series_software | < 24.0 | 24.0 |
| intel | ethernet_controller_710-bm1_firmware | < 7.0 | 7.0 |
| intel | ethernet_controller_x710-at2_firmware | < 7.0 | 7.0 |
| intel | ethernet_controller_x710-bm2_firmware | < 7.0 | 7.0 |
| intel | ethernet_controller_x710-tm4_firmware | < 7.0 | 7.0 |
| intel | ethernet_controller_xxv710-am1_firmware | < 7.0 | 7.0 |
| intel | ethernet_controller_xxv710-am2_firmware | < 7.0 | 7.0 |
| paloalto | pan-os | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN
vendor_paloalto·2020-04-08·CVSS 6.7
CVE-2019-0139 [MEDIUM] PAN
PAN
Palo Alto Networks Product Security Assurance team has evaluated and determined that these third-party or open source vulnerabilities do not have a security impact on Palo Alto Networks Products, or the scenarios required for successful
CVEs: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0144, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147, CVE-2019-0148, CVE-2019-0149, CVE-2019-0150, CVE-2019-11168, CVE-2019-11170, CVE-2019-11171, CVE-2019-11172, CVE-2019-11173, CVE-2019-11174, CVE-2019-11175, CVE-2019-11177, CVE-2019-11178, CVE-2019-11179, CVE-2019-11180, CVE-2019-11181, CVE-2019-11182, CVE-2019-12735, CVE-2019-16905, CVE-2020-0561, CVE-2020-0562, CVE-2020-0563, CVE-2020-0564
Affected products: PAN-OS
GHSA
GHSA-p8j9-xg3x-hph5: Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7
ghsa_unreviewed·2022-05-24
CVE-2019-0139 [MEDIUM] CWE-269 GHSA-p8j9-xg3x-hph5: Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
No detection rules found.
No writeups or analysis indexed.
https://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSShttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.htmlhttps://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSShttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html
2019-11-14
Published