PT-2025-32698

Name of the Vulnerable Software and Affected Versions: IntelR CSME and IntelR SPS affected versions not specified Description: An observable timing discrepancy in firmware may allow a privileged user to potentially enable information disclosure via local access. Recommendations: At the moment,...

HPESBHF04881 rev.1 - HPE SimpliVity Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-01209 - Intel PTT and SPS Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10 v20250630 HPE SimpliVity 380 Gen10 G - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10...

CVE-2020-0545

Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...

The vulnerability of the microprogramming software for Intel Server Platform Services (SPS) chipsets like Intel C740, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the microprogramming software in Intel Server Platform Services SPS chipsets of the Intel C740 is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Intel SPS 输入验证错误漏洞

Intel SPS is a server platform service from Intel Corporation USA. An input validation error vulnerability exists in versions prior to Intel SPS SPSE506.01.04.059.0, which stems from improper input validation and results in a local denial of service...

The vulnerability of software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP platform lies in the insufficient protection of operational data, which allows attackers to disclose confidential information.

The vulnerabilities of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server are related to insufficient protection of operational data. Exploiting these vulnerabilities can allow attackers to disclose sensitive information...

Intel SPS Resource Management Error Vulnerability

Intel SPS is a server platform service from Intel Corporation USA. Intel SPS suffers from a resource management error vulnerability that originates from allowing a privileged user to implement a denial of service via network access. Affected Products and Versions:Intel SPS SPSE504.04.04.500.0 pri...

2024.1 IPU - Intel® Chipset Software and SPS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security Management Engine CSME installer, Intel® Local Manageability Service software and Intel® Server Platform Servcies SPS may allow information disclosure, escalation of privilege, or denial of service. Vulnerability Details...

HPESBHF04623 rev.1 - HPE Apollo/XL Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00923, 2024.1 IPU - Intel Chipset Software and SPS Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to v04.04.04.603.0 HPE Apollo 2000 Gen10 Plus System - Prior to v04.04.04.603.0 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04616 rev.1 - HPE Synergy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00923, 2024.1 IPU - Intel Chipset Software and SPS Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to v04.04.04.603.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-35191 |...

The vulnerability of the Manageability Engine (ME) in Intel Server Platform Services (SPS) software for Lenovo ThinkSystem servers allows a malicious actor to alter the firmware configuration and trigger a service failure.

The vulnerability of the Manageability Engine ME in Intel Server Platform Services SPS of Lenovo ThinkSystem servers stems from the synchronization failure between BIOS/UEFI and ME states due to the use of non-replicable configurations. Exploiting this vulnerability can allow an attacker to alter...

PT-2024-1792 · Intel · Intel Server Platform Services

Name of the Vulnerable Software and Affected Versions: Intel Server Platform Services versions prior to SPS E5 06.01.04.002.0 Description: The issue is related to uncontrolled resource consumption in Intel Server Platform Services firmware, which may allow a privileged user to potentially enable...

Intel SPS Security Vulnerability

Intel SPS is a server platform service from Intel Corporation USA. A security vulnerability previously existed in the Intel SPS SPSE506.01.04.002.0 version, which stemmed from an uncontrolled resource consumption issue in the affected product. It could result in a denial of service that could be...

Intel SPS End of Manufacturing Not Executed for Certain ThinkSystem SR670V2 Servers - Lenovo Support US

No description provided...

K65043534: Multiple INTEL BIOS vulnerabilities

Security Advisory Description CVE-2017-5705 Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code. CVE-2017-5706 Multiple buffer overflows in kernel in Intel Server Platfo...

K60381308: Intel CPU vulnerability CVE-2018-3655

Security Advisory Description A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information v...

K54380426: Intel CPU vulnerability CVE-2018-3643

Security Advisory Description A vulnerability in Power Management Controller firmware in systems using specific Intel Converged Security and Management Engine CSME before version 12.0.6 or Intel Server Platform Services firmware before version 4.x.04 may allow a privileged user to potentially...

Intel SPS 安全漏洞

Intel SPS is a server platform service from Intel Corporation USA. A security vulnerability exists in versions prior to Intel R SPS firmware SPSE504.04.04.300.0. An attacker could exploit the vulnerability to escalate privileges...

Intel SPS 代码问题漏洞

Intel SPS is a server platform service from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR SPS firmware SPSE306.00.03.300.0, which stems from an incorrect condition check. An attacker could exploit the vulnerability to cause a denial of service on the system...

HPESBHF04435 rev.2 - HPE Synergy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 04.04.04.300 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-36348 |...