Vulnerabilities > Intel > Server Platform Services Firmware > sps.e3.06.00.03.035.0

DATE CVE VULNERABILITY TITLE RISK
2019-03-14 CVE-2018-12198 Improper Input Validation vulnerability in Intel Server Platform Services Firmware
Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.
local
low complexity
intel CWE-20
6.0
2019-03-14 CVE-2018-12192 Improper Authentication vulnerability in Intel products
Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.
low complexity
intel CWE-287
6.8