SP
Product
Server Platform Services
12
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 8Low 0
Watch
Add Server Platform Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36348 | 7.8 | Feb 16 | Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local… Affected: before sps_e5_04.04.04.300.0 |
| CVE-2020-8744 | 7.8 | Nov 12 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions… Affected: before e3_05.01.04.200 |
| CVE-2020-0586 | 7.8 | Jun 15 | Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable… Affected: sps_e3_04.00.00.000.0 before sps_e3_04.01.04.109.0; sps_e3_04.08.00.000.0 before sps_e3_04.08.04.070.0; sps_e5_04.00.00.000.0 before sps_e5_04.01.04.380.0; sps_soc-a_04.00.00.000.0 before sps_soc-a_04.00.04.211.0; sps_soc-x_04.00.00.000.0 before sps_soc-x_04.00.04.128.0 |
| CVE-2019-0090 | 7.1 | May 17 | Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R)… Affected: before sps_e3_05.00.04.027.0 |
| CVE-2020-8705 | 6.8 | Nov 12 | Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25,… Affected: sps_e3_04.01.04.200; sps_e5_04.01.04.400; sps_soc-a_04.00.04.300; sps_soc-x_04.00.04.200 |
| CVE-2020-24509 | 6.7 | Jun 9 | Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0… Affected: before sps_soc-a_05.00.03.091.0; sps_e3_05.01.04.300.0; sps_e5_04.04.03.263.0; sps_e5_04.04.04.023.0 |
| CVE-2019-0089 | 6.7 | May 17 | Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and… Affected: before sps_e5_04.00.04.381.0; before sps_e3_04.01.04.054.0; before sps_soc-a_04.00.04.181.0; before sps_soc-x_04.00.04.086.0 |
| CVE-2020-8755 | 6.4 | Nov 12 | Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated… Affected: before e5_04.01.04.400; before e3_05.01.04.200 |
| CVE-2023-29153 | 4.9 | Feb 14 | Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via… Affected: before SPS_E5_06.01.04.002.0 |
| CVE-2022-36794 | 4.4 | Feb 16 | Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access Affected: before sps_e3_06.00.03.300.0 |
| CVE-2021-0051 | 4.4 | Jun 9 | Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially… Affected: before sps_e5_04.04.04.023.0; before sps_e5_04.04.03.228.0; before sps_soc-a_05.00.03.098.0 |
| CVE-2020-0545 | 4.4 | Jun 15 | Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services… Affected: sps_e3_04.00.00.000.0 before sps_e3_04.01.04.109.0; sps_e3_04.08.00.000.0 before sps_e3_04.08.04.070.0; sps_e5_04.00.00.000.0 before sps_e5_04.01.04.380.0; sps_soc-a_04.00.00.000.0 before sps_soc-a_04.00.04.211.0; sps_soc-x_04.00.00.000.0 before sps_soc-x_04.00.04.128.0 |
Showing 12