CVE-2019-11174 — Sensitive Information Exposure in Intel Baseboard Management Controller Firmware

3 documents3 sources

Severity

5.3MEDIUMNVD

EPSS

0.5%

top 34.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Baseboard Management Controller Firmware

Timeline

PublishedNov 14

Latest updateMay 24

Description

Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDintel/baseboard_management_controller_firmware< 2.18

🔴Vulnerability Details

GHSA

GHSA-xvx7-cgrp-p764: Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information d↗2022-05-24

▶

CVEList

CVE-2019-11174: Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information d↗2019-11-14

▶