CVE-2021-0060

CVE-2021-0060 affects Intel Chipset Firmware’s Server Platform Services (SPS) HECI, where insufficient compartmentalization could let an authenticated user escalate privileges with physical access. Affected products include Intel SPS firmwares, before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04....

CVE-2021-0051

Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0051

Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...

Input validation

Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24509

Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0051

Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24509

Insufficient control flow management in subsystem in IntelR SPS versions before SPSE305.01.04.300.0, SPSSoC-A05.00.03.091.0, SPSE504.04.04.023.0, or SPSE504.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel® SPS Advisory

Summary: A potential security vulnerability in the Intel® Server Platform Services SPS may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0051 Description: Improper input validation in the IntelR SPS...

CVE-2020-8755

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8755

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Race condition

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

PT-2020-4858 · Intel · Intel Csme +2

Name of the Vulnerable Software and Affected Versions: Intel CSME versions prior to 12.0.70 Intel CSME versions prior to 13.0.40 Intel CSME versions prior to 13.30.10 Intel CSME versions prior to 14.0.45 Intel CSME versions prior to 14.5.25 Intel TXE versions prior to 4.0.30 Intel SPS versions...

CVE-2020-0586

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

Input validation

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0586

CVE-2020-0586 affects Intel Server Platform Services (SPS) subsystems prior to SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0. The root cause is improper initialization in SPS, which may allow a locally authenticated user to escalate privileges and/or cause a denial of service. Public sources (I...

CVE-2020-0586

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2019-11109

Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access...

Information disclosure

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...