CVE-2019-11168

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-11178.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VCVE-2019-111707.8Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable informatiCVE-2019-111719.8Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disCVE-2019-111725.3Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information dCVE-2019-111737.1Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enableCVE-2019-111745.3Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable infCVE-2019-111757.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable dCVE-2019-111777.5Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of sCVE-2019-111788.1Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information discloCVE-2019-111796.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable infCVE-2019-11188.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VCVE-2019-111807.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable d
CVE-2019-11168: Critical severity, CVSS 9.1 | Vulnix