Vulnerability Details CVE-2019-0139
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.5%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 4.6
References
- https://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSS
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html
- https://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSS
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html
Products affected by CVE-2019-0139
-
cpe:2.3:a:intel:ethernet_700_series_software:-
-
cpe:2.3:a:intel:ethernet_700_series_software:22.10
-
cpe:2.3:a:intel:ethernet_700_series_software:23.4
-
cpe:2.3:a:intel:ethernet_700_series_software:23.5
-
cpe:2.3:a:intel:ethernet_700_series_software:23.5.1
-
cpe:2.3:a:intel:ethernet_700_series_software:23.5.2
-
cpe:2.3:h:intel:ethernet_controller_710-bm1:-
-
cpe:2.3:h:intel:ethernet_controller_x710-at2:-
-
cpe:2.3:h:intel:ethernet_controller_x710-bm2:-
-
cpe:2.3:h:intel:ethernet_controller_x710-tm4:-
-
cpe:2.3:h:intel:ethernet_controller_xxv710-am1:-
-
cpe:2.3:h:intel:ethernet_controller_xxv710-am2:-
-
cpe:2.3:o:intel:ethernet_controller_710-bm1_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_710-bm1_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_710-bm1_firmware:2.8.43
-
cpe:2.3:o:intel:ethernet_controller_x710-at2_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_x710-at2_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_x710-at2_firmware:2.8.43
-
cpe:2.3:o:intel:ethernet_controller_x710-bm2_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_x710-bm2_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_x710-bm2_firmware:2.8.43
-
cpe:2.3:o:intel:ethernet_controller_x710-tm4_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_x710-tm4_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_x710-tm4_firmware:2.8.43
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am1_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am1_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am1_firmware:2.8.43
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am2_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am2_firmware:1.33.0.0
-
cpe:2.3:o:intel:ethernet_controller_xxv710-am2_firmware:2.8.43