CVE-2019-0099

Insufficient access control vulnerability in subsystem in IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0093

Insufficient data sanitization vulnerability in HECI subsystem for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0089

CVE-2019-0089 affects Intel Server Platform Services (SPS) and related Intel CSME/SPS components. The issue is an improper data sanitization vulnerability in SPS subsystems prior to SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 that may allow...

CVE-2019-0099

CVE-2019-0099 affects Intel SPS before SPS_E3_05.00.04.027.0, where insufficient access control could let an unauthenticated, physically proximate user escalate privileges via the SPS subsystem. The connected Intel advisory and F5 Traffix docs corroborate the vulnerable component (Intel SPS) and ...

CVE-2019-0090

Intel CVE-2019-0090 describes an insufficient access control vulnerability in Intel CSME, SPS, TXE, and related components. Affected: Intel CSME before 11.x and 12.0.35; Intel SPS before SPS_E3_05.00.04.027.0; Intel TXE 3.x, 4.x; Intel Server Platform Services 3.x, 4.x. Root cause: insufficient a...

CVE-2019-0089

Improper data sanitization vulnerability in subsystem in IntelR SPS before versions SPSE504.00.04.381.0, SPSE304.01.04.054.0, SPSSoC-A04.00.04.181.0, and SPSSoC-X04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access...

ABB 1SAP140500R0271 PM585-ETH AC500 SPS PLC Detection

Binary data 756311.prm...

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or IntelR TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrar...

2019.2 IPU – Intel® CSME, Intel® SPS, Intel® TXE, Intel® AMT, Intel® PTT and Intel® DAL Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Platform Trust Technology PTT and Intel® Dynamic Application Loader DAL...

CVE-2018-11960

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel...

Race condition

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel...

CVE-2018-11960

CVE-2018-11960. A use-after-free condition in the Qualcomm HWEngines component (SPS driver) used in CAF Android builds (Linux kernel) can cause kernel errors. Affected context and wording in connected records indicate the issue arises within the SPS driver in Android CAF environments across affec...

CVE-2018-11960

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel...

PT-2023-15165 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to an Integer overflow vulnerability in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8316. Recommendations: For GPAC MP4box versi...

PT-2023-15162 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow that occurs via the gf vvc read sps bs internal function in the media tools/av parsers.c file. This function is part of the GPAC MP4box, whic...

PT-2023-15452 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev617-g85ce76efd Description: The issue is related to a Buffer Overflow in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8273. Recommendations: For GPAC MP4box version...

CVE-2018-9085

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services SPS and the system Flash Descriptors...

CVE-2018-9085

CVE-2018-9085 affects Lenovo/IBM System x family vendors. A missing write-protection lock bit after boot enables a locally authenticated attacker with admin access to modify flash areas containing Intel SPS and system flash descriptors. This can lead to system instability or DoS-like behavior, as...

Intel CSME / SPS and TXE Vulnerabilities - Lenovo Support US

No description provided...

Intel CSME / SPS and TXE Vulnerabilities - US

Lenovo Security Advisory: LEN-22810 Potential Impact: Elevation of privilege, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3655, CVE-2018-3657, CVE-2018-3658, CVE-2018-3659, CVE-2018-3616 Summary Description: Intel has disclosed...