PT-2022-4682 · Intel · Intel Sps

Tomasz Bagniuk · Published 2022-03-02 · Updated 2022-10-07 · CVE-2022-26074

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) SPS versions prior to SPS E3 04.08.04.330.0 Intel(R) SPS versions prior to SPS E3 04.01.04.530.0

Description The issue is related to incomplete cleanup in a firmware subsystem, which may allow a privileged user to potentially enable denial of service via local access. This could be exploited by an attacker to cause a denial of service.

Recommendations For versions prior to SPS E3 04.08.04.330.0, update to version SPS E3 04.08.04.330.0 or later. For versions prior to SPS E3 04.01.04.530.0, update to version SPS E3 04.01.04.530.0 or later.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

CWE-459

Related Identifiers

BDU:2022-05570

CVE-2022-26074

Affected Products

Intel Sps

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2022-26074 · Security Note
• https://bdu.fstec.ru/vul/2022-05570 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00669.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26074 · Vendor Advisory
• https://vuldb.com/ru/?id.206811 · Note
• https://t.me/cibsecurity/48413 · Telegram Post
• https://security.netapp.com/advisory/ntap-20220930-0003 · Note
• https://intel.com/content/www/us/en/support/ru-banner-inside.html · Note
• https://supermicro.com/en/support/security_Intel_IPU2022.2_Update · Note