Lucene search

[email protected]CVE-2020-0586

HistoryJun 15, 2020 - 2:15 p.m.

CVE-2020-0586

2020-06-1514:15:11

CWE-665

[email protected]

web.nvd.nist.gov

cve-2020-0586

intel sps

improper initialization

privilege escalation

denial of service

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.4%

JSON

Improper initialization in subsystem for Intel® SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.

Affected configurations

NVD

Node

intelserver_platform_servicesRangesps_e3_04.00.00.000.0–sps_e3_04.01.04.109.0

intelserver_platform_servicesRangesps_e3_04.08.00.000.0–sps_e3_04.08.04.070.0

intelserver_platform_servicesRangesps_e5_04.00.00.000.0–sps_e5_04.01.04.380.0

intelserver_platform_servicesRangesps_soc-a_04.00.00.000.0–sps_soc-a_04.00.04.211.0

intelserver_platform_servicesRangesps_soc-x_04.00.00.000.0–sps_soc-x_04.00.04.128.0

CPENameOperatorVersion
intel:server_platform_servicesintel server platform servicesltsps_e3_04.01.04.109.0
intel:server_platform_servicesintel server platform servicesltsps_e3_04.08.04.070.0
intel:server_platform_servicesintel server platform servicesltsps_e5_04.01.04.380.0
intel:server_platform_servicesintel server platform servicesltsps_soc-a_04.00.04.211.0
intel:server_platform_servicesintel server platform servicesltsps_soc-x_04.00.04.128.0

CPE	Name	Operator	Version
intel:server_platform_services	intel server platform services	lt	sps_e3_04.01.04.109.0
intel:server_platform_services	intel server platform services	lt	sps_e3_04.08.04.070.0
intel:server_platform_services	intel server platform services	lt	sps_e5_04.01.04.380.0
intel:server_platform_services	intel server platform services	lt	sps_soc-a_04.00.04.211.0
intel:server_platform_services	intel server platform services	lt	sps_soc-x_04.00.04.128.0

CNA Affected

[
  {
    "product": "Intel(R) SPS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]