CVE-2019-11168
mediumpriority · track · 36EPSS 0.013 · 69 %ileEURUUSEPSS · scored 2026-10-27
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.4–9.1
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (3)
Products and version ranges known to be affected.
- intel baseboard management controller firmware< 2.18nvdUScpe:2.3:o:intel:baseboard_management_controller_firmware:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2019-11168cnnvd
- https://support.f5.com/csp/article/K64346530?utm_source=f5support&utm_medium=RSScnnvd
- https://support.lenovo.com/us/en/product_security/LEN-29773cnnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.htmlcnnvd
- https://support.f5.com/csp/article/K64346530?utm_source=f5support&%3Butm_medium=RSSenisa_euvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.htmlenisa_euvd
- https://support.f5.com/csp/article/K64346530?utm_source=f5support&%3Butm_medium=RSSnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.htmlVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan