PT-2019-3843 · Intel · Intel Server Platform Services

Published 2019-11-12 · Updated 2020-01-03 · CVE-2019-11109

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intel Server Platform Services (SPS) versions prior to SPS E5 04.01.04.275.0 Intel Server Platform Services (SPS) versions prior to SPS SoC-X 04.00.04.100.0 Intel Server Platform Services (SPS) versions prior to SPS SoC-A 04.00.04.191.0

Description The issue is related to a logical error in the Intel Server Platform Services (SPS) subsystem. It may allow a privileged user to potentially enable denial of service via local access.

Recommendations For versions prior to SPS E5 04.01.04.275.0, update to version SPS E5 04.01.04.275.0 or later. For versions prior to SPS SoC-X 04.00.04.100.0, update to version SPS SoC-X 04.00.04.100.0 or later. For versions prior to SPS SoC-A 04.00.04.191.0, update to version SPS SoC-A 04.00.04.191.0 or later.

Fix

Weakness Enumeration

CWE-511

Related Identifiers

BDU:2019-04202

CVE-2019-11109

Affected Products

Intel Server Platform Services

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11109 · Security Note
• https://bdu.fstec.ru/vul/2019-04202 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11109 · Vendor Advisory
• https://support.f5.com/csp/article/K54164678?utm_source=f5support&amp%3Butm_medium=RSS · Note