HPESBHF03914 rev.1 - Certain HPE Servers with Intel Server Platform Services (SPS) Firmware, Multiple Local Vulnerabilities

🗓️ 04 Apr 2019 00:00:00Reported by hpeType

Local authentication bypass, DoS, and arbitrary code execution affect HPE ProLiant Gen10 servers with SPS before 04.01.04.251.

Reporter	Title	Published	Views	Family All 40
BDU FSTEC	The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
Circl	CVE-2018-12191	14 Mar 201923:20	–	circl
Circl	CVE-2018-12192	14 Mar 201923:20	–	circl
Circl	CVE-2018-12198	14 Mar 201923:20	–	circl
Circl	CVE-2018-12208	14 Mar 201923:19	–	circl
CNVD	Intel Converged Security and Management Engine, Intel TXE and Intel Server Platform Services HECI subsystem buffer overflow vulnerability	18 Mar 201900:00	–	cnvd
CNVD	Buffer Overflow Vulnerability in Multiple Intel Products	18 Mar 201900:00	–	cnvd