278 matches found
K47234311: Intel SPS vulnerability CVE-2019-0089
Security Advisory Description Improper data sanitization vulnerability in subsystem in IntelR SPS before versions SPSE504.00.04.381.0, SPSE304.01.04.054.0, SPSSoC-A04.00.04.181.0, and SPSSoC-X04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access...
K13710800: Intel CSME and SPS vulnerability CVE-2019-0093
Security Advisory Description Insufficient data sanitization vulnerability in HECI subsystem for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local...
K44691188: Intel TXE / SPS vulnerabilities CVE-2020-0566, CVE-2020-0586
Security Advisory Description CVE-2020-0566 Improper Access Control in subsystem for IntelR TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. CVE-2020-0586 Improper initialization in subsystem for IntelR SPS...
K54164678: Intel SPS vulnerability CVE-2019-11109
Security Advisory Description Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access. CVE-2019-11109 Impact There is no impact; F5...
K43877335: Intel software vulnerabilities CVE-2020-8751, CVE-2020-8755, CVE-2020-8761, CVE-2020-12303
Security Advisory Description CVE-2020-8751 Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, IntelR TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access. CVE-2020-8755 Race condition...
CVE-2022-36348
Active debug code in some Intel R SPS firmware before version SPSE504.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-36794
Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...
Input validation
Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...
Privilege escalation
Active debug code in some Intel R SPS firmware before version SPSE504.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-36794
Intel SPS firmware CVE-2022-36794: a root cause is an improper condition check in Intel SPS firmware prior to SPS_E3_06.00.03.300.0, which could allow a privileged user to cause a local denial of service. Affected versions are affected before the stated SPS_E3_06.00.03.300.0, and mitigation is to...
CVE-2022-36794
Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-36348
Summary: CVE-2022-36348 affects Intel® Server Platform Services (SPS) firmware. The issue is caused by active debug code present in SPS firmware before version SPS_E5_04.04.04.300.0, which could allow an authenticated user to potentially escalate privileges via local access. Affected scope: Intel...
CVE-2022-36348
Active debug code in some Intel R SPS firmware before version SPSE504.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-13502 · Intel · Intel Sps Firmware
Name of the Vulnerable Software and Affected Versions: IntelR SPS firmware versions prior to SPS E3 06.00.03.300.0 Description: The issue is related to an improper condition check in the IntelR SPS firmware, which may allow a privileged user to potentially enable denial of service via local acces...
PT-2023-13480 · Intel · Intel Sps Firmware
Name of the Vulnerable Software and Affected Versions: Intel R SPS firmware versions prior to SPS E5 04.04.04.300.0 Description: The issue is related to active debug code in some Intel R SPS firmware, which may allow an authenticated user to potentially enable escalation of privilege via local...
2023.1 IPU - Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in the Intel® Server Platform Services SPS firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-36348 Description: Active debug code in some Inte...
sps-pi.cz Cross Site Scripting vulnerability OBB-3130917
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2022-47654
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8261...