CVE Daily

CVE-2019-11168

Insufficient session validation in Intel(R) Baseboard Management Controller firm...

Critical CVSS 9.1

Overview

Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.

CWE: N/A Published: 2019-11-14T17:15:13.710
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.1 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags