CVE-2019-11171

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-111725.3Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information dCVE-2019-111737.1Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enableCVE-2019-111745.3Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable infCVE-2019-111757.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable dCVE-2019-111777.5Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of sCVE-2019-111788.1Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information discloCVE-2019-111796.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable infCVE-2019-11188.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VCVE-2019-111807.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable dCVE-2019-111817.8Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation ofCVE-2019-111827.5Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of serCVE-2019-111844.8A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially e
CVE-2019-11171: Critical severity, CVSS 9.8 | Vulnix