CVE-2019-11136: HPE Apollo 4200 GEN10 Server Firmware

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected products

• HPE Apollo 4200 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Apollo 4200 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant BL460C GEN10 Server Blade Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant BL460C GEN9 Server Blade Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant BL660C GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL120 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL120 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL160 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL160 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL180 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL180 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL360 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL360 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL380 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL380 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL560 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL560 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL580 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant DL580 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL60 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant DL80 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant e910 Server Blade Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant ML110 GEN10 Server Firmware: before 2.20 (fixed in 2.20)
• HPE Proliant ML110 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• HPE Proliant ML150 GEN9 Server Firmware: before 2.76 (fixed in 2.76)
• and 259 more

Published 2019-11-14. Last modified 2026-10-08.