EUVD-2018-4176

Malware in sbrugna...

EUVD-2018-4125

Malware in sbrugna...

EUVD-2017-14783

Malware in sbrugna...

2024.1 IPU - Intel® Chipset Software and SPS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security Management Engine CSME installer, Intel® Local Manageability Service software and Intel® Server Platform Servcies SPS may allow information disclosure, escalation of privilege, or denial of service. Vulnerability Details...

Intel SPS End of Manufacturing Not Executed for Certain ThinkSystem SR670V2 Servers - Lenovo Support US

No description provided...

K54380426: Intel CPU vulnerability CVE-2018-3643

Security Advisory Description A vulnerability in Power Management Controller firmware in systems using specific Intel Converged Security and Management Engine CSME before version 12.0.6 or Intel Server Platform Services firmware before version 4.x.04 may allow a privileged user to potentially...

CVE-2020-8744

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4146

Name of the Vulnerable Software and Affected Versions: Intel CSME versions prior to 11.8.77 Intel CSME versions prior to 11.12.77 Intel CSME versions prior to 11.22.77 Intel TXE versions prior to 3.1.75 Intel TXE versions prior to 4.0.25 Intel Server Platform Services SPS versions prior to SPS E5...

PT-2019-3843

Name of the Vulnerable Software and Affected Versions Intel Server Platform Services SPS versions prior to SPS E5 04.01.04.275.0 Intel Server Platform Services SPS versions prior to SPS SoC-X 04.00.04.100.0 Intel Server Platform Services SPS versions prior to SPS SoC-A 04.00.04.191.0 Description...

PT-2019-2203

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine versions prior to 11.8.65 Intel Converged Security and Manageability Engine versions prior to 11.11.65 Intel Converged Security and Manageability Engine versions prior to 11.22.65 Intel Converg...

Intel VISA Tech Can Be Abused, Researchers Allege

UPDATE Researchers allege that a technology in Intel microchips could potentially be activated and abused by bad actors – giving them complete access to all data across an affected device. The Intel technology is called Visualization of Internal Signals Architecture VISA, and is used for...

The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.

The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services SPS is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Buffer overflow

Buffer overflow in HECI subsystem in IntelR CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and IntelR TXE version before 3.1.60 or 4.0.10, or IntelR Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physica...

Input validation

Insufficient input validation in IntelR Server Platform Services HECI subsystem before version SPSE504.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access...

CVE-2018-12198

Insufficient input validation in IntelR Server Platform Services HECI subsystem before version SPSE504.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access...

CVE-2018-12208

Intel CVE-2018-12208 is a buffer overflow in the HECI subsystem affecting Intel CSME, TXE, and SPS prior to specified fixed versions. The Intel advisory INTEL-SA-00185 documents the issue, listing affected products and firmware families (CSME before 11.8.60/11.11.60/11.22.60 or 12.0.20; TXE befor...

PT-2019-1629

Name of the Vulnerable Software and Affected Versions Intel Server Platform Services versions prior to SPS E5 04.00.04.393.0 Description The issue is related to insufficient input validation in the HECI subsystem of Intel Server Platform Services, which may allow a privileged user to cause a deni...

PT-2019-1626

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 Intel Trusted Execution Engine TXE versions prior to 3.1.60 or 4.0.10 Intel Server Platform Services SPS versions prior to...

PT-2019-1627

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60 Intel CSME versions prior to 11.11.60 Intel CSME versions prior to 11.22.60 Intel CSME versions prior to 12.0.20 Intel Server Platform Services versions prior to SPS E5 04.00.04.393.0 Description The issue ...

CVE-2018-9085 Missing System x Flash Memory Write Protection Lock Bit

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services SPS and the system Flash Descriptors...