CVE-2019-0126

Medium

Description

Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Xeon D-1649n Firmware
PublishedMay 17, 2019
First seenMay 17, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
intel xeon_d-1649n_firmwareNo range specified—
intel xeon_d-1633n_firmwareNo range specified—
intel xeon_d-1637_firmwareNo range specified—
intel xeon_d-1627_firmwareNo range specified—
intel xeon_d-1623n_firmwareNo range specified—
intel xeon_d-1622_firmwareNo range specified—
intel xeon_d-1653n_firmwareNo range specified—
intel xeon_d-1602_firmwareNo range specified—
intel xeon_d-2141i_firmwareNo range specified—
intel xeon_d-2177nt_firmwareNo range specified—
intel xeon_d-2161i_firmwareNo range specified—
intel xeon_d-2143it_firmwareNo range specified—
intel xeon_d-2146nt_firmwareNo range specified—
intel xeon_d-2145nt_firmwareNo range specified—
intel xeon_d-2123it_firmwareNo range specified—
intel xeon_d-2173it_firmwareNo range specified—
intel xeon_d-2191_firmwareNo range specified—
intel xeon_d-2187nt_firmwareNo range specified—
intel xeon_d-2142it_firmwareNo range specified—
intel xeon_d-2163it_firmwareNo range specified—
intel xeon_d-2183it_firmwareNo range specified—
intel xeon_d-2166nt_firmwareNo range specified—
intel xeon_d-1513n_firmwareNo range specified—
intel xeon_d-1533n_firmwareNo range specified—
intel xeon_d-1553n_firmwareNo range specified—
intel xeon_d-1523n_firmwareNo range specified—
intel xeon_d-1543n_firmwareNo range specified—
intel xeon_d-1559_firmwareNo range specified—
intel xeon_d-1529_firmwareNo range specified—
intel xeon_d-1539_firmwareNo range specified—
intel xeon_d-1567_firmwareNo range specified—
intel xeon_d-1557_firmwareNo range specified—
intel xeon_d-1577_firmwareNo range specified—
intel xeon_d-1571_firmwareNo range specified—
intel xeon_d-1528_firmwareNo range specified—
intel xeon_d-1541_firmwareNo range specified—
intel xeon_d-1518_firmwareNo range specified—
intel xeon_d-1521_firmwareNo range specified—
intel xeon_d-1531_firmwareNo range specified—
intel xeon_d-1548_firmwareNo range specified—
intel xeon_d-1527_firmwareNo range specified—
intel xeon_d-1537_firmwareNo range specified—
intel xeon_d-1540_firmwareNo range specified—
intel xeon_d-1520_firmwareNo range specified—
intel xeon_platinum_processors_firmwareNo range specified—
intel xeon_gold_processors_firmwareNo range specified—
intel xeon_silver_processors_firmwareNo range specified—
intel xeon_bronze_processors_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-0126 · Intel Xeon D-1649n Firmware · Dark Radar