CVE-2022-29466

Improper input validation in firmware for IntelR SPS before version SPSE304.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

Input validation

Improper input validation in firmware for IntelR SPS before version SPSE304.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29515

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-29466

Improper input validation in firmware for IntelR SPS before version SPSE304.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29515

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-29515

CVE-2022-29515 describes a memory release failure in Intel® Server Platform Services (SPS) firmware that can permit a privileged local attacker to cause a denial of service. The issue affects SPS firmware prior to SPS_E3_06.00.03.035.0 (as stated in multiple sources); exploitation requires local ...

CVE-2022-29466

CVE-2022-29466 affects Intel SPS firmware prior to SPS_E3_04.01.04.700.0. The issue is improper input validation in the firmware, which may allow an authenticated user to cause a denial of service via local access. Affected product: Intel Server Platform Services (SPS) firmware; vulnerable compon...

PT-2022-19632 · Intel · Intel Sps

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 04.01.04.700.0 Description: The issue is related to improper input validation in the firmware, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations...

Intel CSME, SPS, and LMS Advisory - Lenovo Support US

No description provided...

CVE-2022-26074

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

Input validation

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-26074

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-26074

CVE-2022-26074 concerns Intel SPS firmware: incomplete cleanup in a firmware subsystem may allow a privileged user to cause a local DoS. Affected products are Intel SPS before SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0. The Red Hat advisory and Intel INTEL-SA-00669 confirm the issue and reme...

2022.2 IPU - Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability in the Intel® Server Platform Services SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26074 Description: Incomplete cleanup in a firmware...

psps.uni-bremen.de Cross Site Scripting vulnerability OBB-2818729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

2021.1 IPU – Intel® CSME, SPS and LMS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, and Intel® Local Manageability Service Intel® LMS may allow escalation of privilege or information disclosure. Intel is releasing firmware and software updates...

PT-2022-4682 · Intel · Intel Sps

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 04.08.04.330.0 IntelR SPS versions prior to SPS E3 04.01.04.530.0 Description: The issue is related to incomplete cleanup in a firmware subsystem, which may allow a privileged user to potentially enable...

CVE-2021-39665

In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android I...

CVE-2021-0060

Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...