Product:

Server_platform_services_firmware

(Intel)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 15
Date Id Summary Products Score Patch Annotated
2019-12-18 CVE-2019-11109 Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access. Big\-Ip_10000s_firmware, Big\-Ip_10050s_firmware, Big\-Ip_10150v\-N_firmware, Big\-Ip_10200v\-S_firmware, Big\-Ip_10250v_firmware, Big\-Ip_10350v\-N_firmware, Big\-Ip_12250v_firmware, Big\-Ip_access_policy_manager, Big\-Ip_advanced_firewall_manager, Big\-Ip_analytics, Big\-Ip_application_acceleration_manager, Big\-Ip_application_security_manager, Big\-Ip_b2250_firmware, Big\-Ip_b4300_firmware, Big\-Ip_b4340n_firmware, Big\-Ip_b4450n_firmware, Big\-Ip_domain_name_system, Big\-Ip_fraud_protection_service, Big\-Ip_global_traffic_manager, Big\-Ip_i10600_firmware, Big\-Ip_i10800_firmware, Big\-Ip_i11600_firmware, Big\-Ip_i11800_firmware, Big\-Ip_i15600_firmware, Big\-Ip_i15800_firmware, Big\-Ip_i5600_firmware, Big\-Ip_i5800_firmware, Big\-Ip_i7600_firmware, Big\-Ip_i7800_firmware, Big\-Ip_link_controller, Big\-Ip_local_traffic_manager, Big\-Ip_policy_enforcement_manager, Viprion_2200_firmware, Server_platform_services_firmware 4.4
2022-11-11 CVE-2022-29466 Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access. Server_platform_services_firmware 5.5
2022-11-11 CVE-2022-29515 Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access. Server_platform_services_firmware 5.5
2022-08-18 CVE-2022-26074 Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access. Server_platform_services_firmware 4.4
2019-03-14 CVE-2018-12191 Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access. Converged_security_management_engine_firmware, Server_platform_services_firmware, Trusted_execution_engine_firmware N/A
2019-06-13 CVE-2018-12147 Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access. Converged_security_management_engine_firmware, Server_platform_services_firmware, Trusted_execution_engine_firmware 6.7
2019-12-18 CVE-2019-11090 Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access. Platform_trust_technology_firmware, Server_platform_services_firmware, Trusted_execution_engine_firmware N/A
2017-11-21 CVE-2017-5709 Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector. Server_platform_services_firmware 7.8
2019-05-17 CVE-2019-0099 Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Server_platform_services_firmware 6.8
2018-09-12 CVE-2018-3655 A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access. Converged_security_management_engine_firmware, Server_platform_services_firmware, Trusted_execution_engine_firmware 7.3