PT-2021-12872 · Intel · Intel(R) Sps

Published 2021-06-09 · Updated 2021-09-14 · CVE-2021-0051

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) SPS versions prior to SPS E5 04.04.04.023.0 Intel(R) SPS versions prior to SPS E5 04.04.03.228.0 Intel(R) SPS versions prior to SPS SoC-A 05.00.03.098.0

Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable denial of service via local access.

Recommendations: For versions prior to SPS E5 04.04.04.023.0, update to SPS E5 04.04.04.023.0 or later. For versions prior to SPS E5 04.04.03.228.0, update to SPS E5 04.04.03.228.0 or later. For versions prior to SPS SoC-A 05.00.03.098.0, update to SPS SoC-A 05.00.03.098.0 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-0051

Affected Products

Intel(R) Sps

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00500.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0051 · Security Note
• https://t.me/cvenotify/16789 · Telegram Post
• https://security.netapp.com/advisory/ntap-20210716-0001 · Note