PT-2024-20686 · Intel · Intel Server D50Fcp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M50FCP Family products affected versions not specified Description: The issue is related to improper input validation in the PfrSmiUpdateFw driver in UEFI firmware, which may allow a privileged user to enable escalation of...

Intel Server Board 安全漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board S2600BP, which stems from an incorrect input validation issue with the EpsdSrMgmtConfig parameter. It could allow a privileged user to conduct a denial of service attack vi...

PT-2024-20216 · Intel · Intel Server D50Fcp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server D50FCP Family products affected versions not specified Description: The issue is related to improper buffer restrictions in the PlatformPfrDxe driver in UEFI firmware, which may allow a privileged user to enable escalation of...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board onboard video driver software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42668 Description: Incorrect default...

Intel® Server Products UEFI Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Products UEFI firmware may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22382 Description: Improper inpu...

The vulnerability of the software for remote management and monitoring of Intel Server Platform Services (SPS) allows a perpetrator to trigger a service failure due to uncontrolled resource consumption.

The vulnerability of the software for remote management and monitoring of Intel Server Platform Services is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

2024.1 IPU - Intel® Chipset Software and SPS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security Management Engine CSME installer, Intel® Local Manageability Service software and Intel® Server Platform Servcies SPS may allow information disclosure, escalation of privilege, or denial of service. Vulnerability Details...

The vulnerability of the Manageability Engine (ME) in Intel Server Platform Services (SPS) software for Lenovo ThinkSystem servers allows a malicious actor to alter the firmware configuration and trigger a service failure.

The vulnerability of the Manageability Engine ME in Intel Server Platform Services SPS of Lenovo ThinkSystem servers stems from the synchronization failure between BIOS/UEFI and ME states due to the use of non-replicable configurations. Exploiting this vulnerability can allow an attacker to alter...

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers stems from deficiencies in the authentication process, allowing attackers to escalate their privileges.

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Server Platform Services’ microprogramming software, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of Intel Server Platform Services’ microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-31189

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

Information disclosure

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

Authentication flaw

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-31189

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

PT-2024-1792 · Intel · Intel Server Platform Services

Name of the Vulnerable Software and Affected Versions: Intel Server Platform Services versions prior to SPS E5 06.01.04.002.0 Description: The issue is related to uncontrolled resource consumption in Intel Server Platform Services firmware, which may allow a privileged user to potentially enable...

Intel SPS Security Vulnerability

Intel SPS is a server platform service from Intel Corporation USA. A security vulnerability previously existed in the Intel SPS SPSE506.01.04.002.0 version, which stemmed from an uncontrolled resource consumption issue in the affected product. It could result in a denial of service that could be...

Intel Server Product OpenBMC Security Vulnerability

Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in Intel Server Product OpenBMC egs-1.05, which stemmed from insufficient credential protection in the affected product. The...