The vulnerability of Intel Server Platform Services’ microprogramming software lies in improper resource initialization, which allows attackers to increase their privileges or cause service failures.

🗓️ 29 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Intel Server Platform Services software has improper resource initialization enabling privilege escalation.

Reporter	Title	Published	Views	Family All 16
CNVD	Intel SPS Security Vulnerability	11 Jun 202000:00	–	cnvd
CVE	CVE-2020-0586	15 Jun 202013:56	–	cve
Cvelist	CVE-2020-0586	15 Jun 202013:56	–	cvelist
EUVD	EUVD-2020-2084	7 Oct 202500:30	–	euvd
F5 Networks	K44691188: Intel TXE / SPS vulnerabilities CVE-2020-0566, CVE-2020-0586	21 Feb 202318:48	–	f5
Hewlett-Packard	HPSBHF03667 rev. 2 - Intel® 2020.1 IPU - CSME, SPS, TXT, AMT and DAL Security Updates	5 Jun 202000:00	–	hp
HPE Security Bulletins	HPESBHF03999 rev.2 – Certain HPE Servers Using Intel Processors with Server Platform Services (SPS), Local Escalation of Privilege and Denial of Service	10 Jun 202000:00	–	hpe
Intel	2020.1 IPU – Intel® CSME, SPS, TXE, AMT, ISM and DAL Advisory	18 Jun 202000:00	–	intel
Lenovo	Intel CSME, SPS, TXE, AMT and DAL Advisory - Lenovo Support US	4 Jun 202020:27	–	lenovo
NCSC	Vulnerabilities fixed in Intel products	10 Jun 202000:00	–	ncsc

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-0586
web	www.web.nvd.nist.gov/view/vuln/detail

29 Sep 2020 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.2

CVSS 38.4

EPSS0.00355

intel server platform services software resource initialization privilege escalation service disruptions