medium6.7
CVE-2019-11136
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(…
Impact
Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Xeon Platinum 8253 Firmware | All versions |
| Intel | Xeon Platinum 8256 Firmware | All versions |
| Intel | Xeon Platinum 8260 Firmware | All versions |
| Intel | Xeon Platinum 8276 Firmware | All versions |
| Intel | Xeon Platinum 8276m Firmware | All versions |
| Intel | Xeon Platinum 8276l Firmware | All versions |
| Intel | Xeon Platinum 8280l Firmware | All versions |
| Intel | Xeon Platinum 8260l Firmware | All versions |
| Intel | Xeon Platinum 8280m Firmware | All versions |
| Intel | Xeon Platinum 8260m Firmware | All versions |
| Intel | Xeon Platinum 8280 Firmware | All versions |
| Intel | Xeon Platinum 8260y Firmware | All versions |