Potential Denial of Service Vulnerability in Intel SPS Firmware
CVE-2023-35191

6.8MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) Sps Firmware Versions
Vendor
CVE Published:
14 March 2024

Summary

A vulnerability exists in certain versions of Intel SPS Firmware that can be exploited by a privileged user through network access. This exploitation could lead to uncontrolled resource consumption, negatively impacting system performance and availability. Organizations utilizing affected Intel SPS Firmware should be aware of the potential for denial of service attacks and take necessary precautions to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) SPS firmware See references

References

https://www.intel.com/content/www/us/en/security-center/a...
https://security.netapp.com/advisory/ntap-20240405-0005/

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.