Denial of Service Vulnerability in Intel SPS Firmware
CVE-2022-26074

4.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Sps
Vendor
CVE Published:
18 August 2022

What is CVE-2022-26074?

A vulnerability exists in the firmware subsystem of Intel® SPS, where incomplete cleanup processes could allow a privileged user to potentially induce a denial of service condition. This risk is particularly pertinent for users with local access to the system, highlighting the importance of keeping firmware updated to mitigate possible exploitation.

Affected Version(s)

Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20220930-0003/
x_refsource_CONFIRM

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.