Intel

Server Platform Services Firmware

15 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2022-29466

  • EPSS 0.05%
  • Published 11.11.2022 16:15:14
  • Last modified 05.02.2025 21:15:17

Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access.

5.5

CVE-2022-29515

  • EPSS 0.02%
  • Published 11.11.2022 16:15:14
  • Last modified 05.02.2025 21:15:17

Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.

4.4

CVE-2022-26074

  • EPSS 0.13%
  • Published 18.08.2022 20:15:10
  • Last modified 05.05.2025 17:18:02

Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access.

4.6

CVE-2019-11109

  • EPSS 0.1%
  • Published 18.12.2019 22:15:13
  • Last modified 21.11.2024 04:20:33

Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.

5.9

CVE-2019-11090

  • EPSS 0.63%
  • Published 18.12.2019 22:15:12
  • Last modified 21.11.2024 04:20:31

Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, ...

7.2

CVE-2018-12147

  • EPSS 0.05%
  • Published 13.06.2019 16:29:00
  • Last modified 21.11.2024 03:44:39

Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially...

6.8

CVE-2019-0099

  • EPSS 0.08%
  • Published 17.05.2019 16:29:01
  • Last modified 21.11.2024 04:16:13

Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

7.6

CVE-2018-12191

  • EPSS 0.25%
  • Published 14.03.2019 20:29:00
  • Last modified 21.11.2024 03:44:43

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an u...

7.2

CVE-2018-12192

  • EPSS 0.07%
  • Published 14.03.2019 20:29:00
  • Last modified 21.11.2024 03:44:43

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication v...

6

CVE-2018-12198

  • EPSS 0.14%
  • Published 14.03.2019 20:29:00
  • Last modified 21.11.2024 03:44:44

Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.