Ofek Ray Mostovoy

**Name of the Vulnerable Software and Affected Versions** Intel(R) AMT versions prior to 15.0.35 **Description** A null pointer dereference issue in the Intel(R) AMT subsystem may allow an authenticated user to potentially enable denial of service via network access. **Recommendations** For versions prior to 15.0.35, update to version 15.0.35 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) SPS versions prior to SPS E5 04.01.04.516.0 Intel(R) SPS versions prior to SPS E5 04.04.04.033.0 Intel(R) SPS versions prior to SPS E5 04.04.03.281.0 Intel(R) SPS versions prior to SPS E5 03.01.03.116.0 Intel(R) SPS versions prior to SPS E3 05.01.04.309.0 Intel(R) SPS versions prior to SPS 02.04.00.101.0 Intel(R) SPS versions prior to SPS SoC-A 05.00.03.114.0 Intel(R) SPS versions prior to SPS SoC-X 04.00.04.326.0 Intel(R) SPS versions prior to SPS SoC-X 03.00.03.117.0 Intel(R) SPS versions prior to IGN E5 91.00.00.167.0 Intel(R) SPS versions prior to SPS PHI 03.01.03.078.0 **Description** Insufficient compartmentalization in the HECI subsystem for Intel(R) SPS may allow an authenticated user to potentially enable escalation of privilege via physical access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel Chipset firmware versions prior to pmc fw lbg c1-21ww02a Intel Chipset firmware versions prior to pmc fw lbg b0-21ww02a **Description** The issue is related to improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware, which may allow a privileged user to potentially enable denial of service via local access. **Recommendations** For Intel Chipset firmware versions prior to pmc fw lbg c1-21ww02a, update to version pmc fw lbg c1-21ww02a or later. For Intel Chipset firmware versions prior to pmc fw lbg b0-21ww02a, update to version pmc fw lbg b0-21ww02a or later.