Intel(R) SPS

6 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-29515before versions SPS_E3_06.00.03.035.0Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privilegedMEDIUM 6.00.2 %
CVE-2022-29466before version SPS_E3_04.01.04.700.0Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially eHIGH 7.30.2 %
CVE-2022-26074before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privMEDIUM 4.40.2 %
CVE-2021-0060 see referencesInsufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_EMEDIUM 6.60.3 %
CVE-2020-0586See provided referenceImproper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticHIGH 7.80.4 %
CVE-2019-11109See provided referenceLogic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 mMEDIUM 4.40.3 %