---
id: CVE-2019-11137
title: >-
  Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable
  Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors
  E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R)
  proc…
summary: >-
  Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable
  Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors
  E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R)
  proc…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-20
vendor: intel
product: xeon_platinum_8253_firmware
affected:
  - xeon_platinum_8253_firmware
  - xeon_platinum_8256_firmware
  - xeon_platinum_8260_firmware
  - xeon_platinum_8276_firmware
  - xeon_platinum_8276m_firmware
  - xeon_platinum_8276l_firmware
  - xeon_platinum_8280l_firmware
  - xeon_platinum_8260l_firmware
  - xeon_platinum_8280m_firmware
  - xeon_platinum_8260m_firmware
  - xeon_platinum_8280_firmware
  - xeon_platinum_8260y_firmware
  - xeon_platinum_8268_firmware
  - xeon_platinum_8270_firmware
  - xeon_platinum_8274_firmware
  - xeon_platinum_8284_firmware
  - xeon_platinum_9242_firmware
  - xeon_platinum_9282_firmware
  - xeon_platinum_8153_firmware
  - xeon_platinum_8156_firmware
  - xeon_platinum_8158_firmware
  - xeon_platinum_8176_firmware
  - xeon_platinum_8160_firmware
  - xeon_platinum_8164_firmware
  - xeon_platinum_8168_firmware
  - xeon_platinum_8170_firmware
  - xeon_platinum_8180_firmware
  - xeon_platinum_8160t_firmware
  - xeon_platinum_8160f_firmware
  - xeon_platinum_8176f_firmware
  - xeon_gold_6210u_firmware
  - xeon_gold_6244_firmware
  - xeon_gold_6212u_firmware
  - xeon_gold_6240_firmware
  - xeon_gold_5218_firmware
  - xeon_gold_6230_firmware
  - xeon_gold_5222_firmware
  - xeon_gold_6238t_firmware
  - xeon_gold_6248_firmware
  - xeon_gold_6252_firmware
  - xeon_gold_6242_firmware
  - xeon_gold_6240y_firmware
  - xeon_gold_5217_firmware
  - xeon_gold_6238m_firmware
  - xeon_gold_5218n_firmware
  - xeon_gold_6226_firmware
  - xeon_gold_6254_firmware
  - xeon_gold_5220_firmware
  - xeon_gold_6238l_firmware
  - xeon_gold_5218b_firmware
  - xeon_gold_6240l_firmware
  - xeon_gold_6238_firmware
  - xeon_gold_6240m_firmware
  - xeon_gold_5220s_firmware
  - xeon_gold_5215_firmware
  - xeon_gold_6222v_firmware
  - xeon_gold_6252n_firmware
  - xeon_gold_5215m_firmware
  - xeon_gold_6246_firmware
  - xeon_gold_5215l_firmware
  - xeon_gold_5218t_firmware
  - xeon_gold_5220t_firmware
  - xeon_gold_6209u_firmware
  - xeon_gold_6262v_firmware
  - xeon_gold_5122_firmware
  - xeon_gold_6138_firmware
  - xeon_gold_6148_firmware
  - xeon_gold_5120t_firmware
  - xeon_gold_6136_firmware
  - xeon_gold_6150_firmware
  - xeon_gold_6152_firmware
  - xeon_gold_6130_firmware
  - xeon_gold_6128_firmware
  - xeon_gold_5118_firmware
  - xeon_gold_6134_firmware
  - xeon_gold_6126_firmware
  - xeon_gold_5120_firmware
  - xeon_gold_5115_firmware
  - xeon_gold_6154_firmware
  - xeon_gold_6140_firmware
  - xeon_gold_6140m_firmware
  - xeon_gold_6132_firmware
  - xeon_gold_6138t_firmware
  - xeon_gold_6142f_firmware
  - xeon_gold_6130t_firmware
  - xeon_gold_6138f_firmware
  - xeon_gold_6130f_firmware
  - xeon_gold_6126t_firmware
  - xeon_gold_6126f_firmware
  - xeon_gold_6148f_firmware
  - xeon_gold_6146_firmware
  - xeon_gold_6144_firmware
  - xeon_silver_4209t_firmware
  - xeon_silver_4210_firmware
  - xeon_silver_4214_firmware
  - xeon_silver_4214y_firmware
  - xeon_silver_4215_firmware
  - xeon_silver_4208_firmware
  - xeon_silver_4216_firmware
  - xeon_silver_4116_firmware
published: '2019-11-14'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:10.493'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-11137'
references:
  - url: >-
      https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS
    label: secure@intel.com
  - url: >-
      https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
    label: secure@intel.com
  - url: >-
      https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00381
epssPercentile: 0.29922
ingestedAt: '2026-10-08T22:11:53.703Z'
---

## Overview

Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

## Affected

- `xeon_platinum_8253_firmware`
- `xeon_platinum_8256_firmware`
- `xeon_platinum_8260_firmware`
- `xeon_platinum_8276_firmware`
- `xeon_platinum_8276m_firmware`
- `xeon_platinum_8276l_firmware`
- `xeon_platinum_8280l_firmware`
- `xeon_platinum_8260l_firmware`
- `xeon_platinum_8280m_firmware`
- `xeon_platinum_8260m_firmware`
- `xeon_platinum_8280_firmware`
- `xeon_platinum_8260y_firmware`
- `xeon_platinum_8268_firmware`
- `xeon_platinum_8270_firmware`
- `xeon_platinum_8274_firmware`
- `xeon_platinum_8284_firmware`
- `xeon_platinum_9242_firmware`
- `xeon_platinum_9282_firmware`
- `xeon_platinum_8153_firmware`
- `xeon_platinum_8156_firmware`
- `xeon_platinum_8158_firmware`
- `xeon_platinum_8176_firmware`
- `xeon_platinum_8160_firmware`
- `xeon_platinum_8164_firmware`
- `xeon_platinum_8168_firmware`
- `xeon_platinum_8170_firmware`
- `xeon_platinum_8180_firmware`
- `xeon_platinum_8160t_firmware`
- `xeon_platinum_8160f_firmware`
- `xeon_platinum_8176f_firmware`
- `xeon_gold_6210u_firmware`
- `xeon_gold_6244_firmware`
- `xeon_gold_6212u_firmware`
- `xeon_gold_6240_firmware`
- `xeon_gold_5218_firmware`
- `xeon_gold_6230_firmware`
- `xeon_gold_5222_firmware`
- `xeon_gold_6238t_firmware`
- `xeon_gold_6248_firmware`
- `xeon_gold_6252_firmware`
- `xeon_gold_6242_firmware`
- `xeon_gold_6240y_firmware`
- `xeon_gold_5217_firmware`
- `xeon_gold_6238m_firmware`
- `xeon_gold_5218n_firmware`
- `xeon_gold_6226_firmware`
- `xeon_gold_6254_firmware`
- `xeon_gold_5220_firmware`
- `xeon_gold_6238l_firmware`
- `xeon_gold_5218b_firmware`
- `xeon_gold_6240l_firmware`
- `xeon_gold_6238_firmware`
- `xeon_gold_6240m_firmware`
- `xeon_gold_5220s_firmware`
- `xeon_gold_5215_firmware`
- `xeon_gold_6222v_firmware`
- `xeon_gold_6252n_firmware`
- `xeon_gold_5215m_firmware`
- `xeon_gold_6246_firmware`
- `xeon_gold_5215l_firmware`
- `xeon_gold_5218t_firmware`
- `xeon_gold_5220t_firmware`
- `xeon_gold_6209u_firmware`
- `xeon_gold_6262v_firmware`
- `xeon_gold_5122_firmware`
- `xeon_gold_6138_firmware`
- `xeon_gold_6148_firmware`
- `xeon_gold_5120t_firmware`
- `xeon_gold_6136_firmware`
- `xeon_gold_6150_firmware`
- `xeon_gold_6152_firmware`
- `xeon_gold_6130_firmware`
- `xeon_gold_6128_firmware`
- `xeon_gold_5118_firmware`
- `xeon_gold_6134_firmware`
- `xeon_gold_6126_firmware`
- `xeon_gold_5120_firmware`
- `xeon_gold_5115_firmware`
- `xeon_gold_6154_firmware`
- `xeon_gold_6140_firmware`
- `xeon_gold_6140m_firmware`
- `xeon_gold_6132_firmware`
- `xeon_gold_6138t_firmware`
- `xeon_gold_6142f_firmware`
- `xeon_gold_6130t_firmware`
- `xeon_gold_6138f_firmware`
- `xeon_gold_6130f_firmware`
- `xeon_gold_6126t_firmware`
- `xeon_gold_6126f_firmware`
- `xeon_gold_6148f_firmware`
- `xeon_gold_6146_firmware`
- `xeon_gold_6144_firmware`
- `xeon_silver_4209t_firmware`
- `xeon_silver_4210_firmware`
- `xeon_silver_4214_firmware`
- `xeon_silver_4214y_firmware`
- `xeon_silver_4215_firmware`
- `xeon_silver_4208_firmware`
- `xeon_silver_4216_firmware`
- `xeon_silver_4116_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.