HPESBHF04429 rev.2 - HPE ProLiant DX Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 04.04.04.300 HPE ProLiant DX380 Gen10 Plus server - Prior to 04.04.04.300 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

phpwcms directory traversal vulnerability

phpwcms is an open source web content management system. It is fast, easy to install and can run on any standard web server platform that supports PHP/MySQL. A directory traversal vulnerability exists in phpwcms version 1.9.25. A remote attacker can exploit this vulnerability to delete arbitrary...

Design/Logic Flaw

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network of the Nextcloud Server. It is recommended that the Nextcloud Maill app is...

多款Intel产品输入验证错误漏洞

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

多款Intel产品安全漏洞

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

多款Intel产品授权问题漏洞

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

Vulnerabilities fixed in Intel Products

Intel has fixed vulnerabilities in the firmware of chipsets from Active Management Technology AMT, Server Platform Services SPS, and PROSet/Wireless WiFi. The vulnerabilities allow a malicious able to perform a denial-of-service DoS or obtain elevated user privileges. Intel has released updates t...

多款Intel产品授权问题漏洞

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

多款Intel产品授权问题漏洞

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

The vulnerability of the BIOS microprogramming system of Intel Server Platform Services allows a perpetrator to trigger a service failure.

The vulnerability of the BIOS microprogramming system in Intel Server Platform Services is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Intel Server Platform Services 安全漏洞

Intel Server Platform Services SPS is a server platform services program from Intel Corporation USA. A security vulnerability exists in Intel SPS SPSE304.08.04.330.0 and prior versions of SPSE304.01.04.530.0, which stems from an incomplete cleanup in the firmware subsystem could allow a privilege...

2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...

Intel SPS、Intel AMT和Intel Power Management Controller 代码问题漏洞

Intel AMT and others are products of Intel Corporation Intel, U.S.A. Intel AMT is an Active Management Technology module.Intel Power Management Controller Intel PMC is a built-in program for power control.Intel SPS is a Server Platform Service. Intel SPS, Intel AMT, and Intel Power Management...

多款Intel产品安全漏洞

Intel Active Management Technology AMT and Intel Power Management Controller Intel PMC are both products of Intel Corporation.Intel Active Management Technology is a hardware-based computer remote active management technology software. Intel Active Management Technology is a set of hardware-based...

Intel Chipset 安全漏洞

Intel Chipset is a family of chips from the U.S.-based Intel Corporation Intel. Intel Chipset has a security vulnerability that stems from a potential security flaw in the firmware of certain Intel chipsets in Intel Server Platform Services SPS, Intel Active Management Technology AMT, and Intel...

phpwcms code injection vulnerability

phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...

Intel Server Platform Services 输入验证错误漏洞

Intel Server Platform Services SPS is a server platform services program from Intel Corporation. A security vulnerability exists in Intel Server Platform Services that stems from a potential security hole in Intel Server Platform Services that could allow a denial of service...

The vulnerability of microprogramming software, including Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Server Platform Services (SPS), arises from insecure resource initialization, allowing attackers to escalate their privileges.

The vulnerabilities of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, are related to insecure resource initialization. Exploiting these vulnerabilities can allow attackers to...

The vulnerability of microprogramming software, including the Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Server Platform Services (SPS), is related to deficiencies in access control. This allows attackers to enhance their privileges.

The vulnerabilities of Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Vulnerability in the Microprogramming Software of the Intel Converged Security and Manageability Engine (CSME) and the Intel Server Platform Services (SPS) allows attackers to enhance their privileges.

The vulnerability in the Microprogramming Software of the Intel Converged Security and Manageability Engine CSME and the Microprogramming Software of the Intel Server Platform Services SPS is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an...