PT-2022-9079 · Intel · Intel(R) Sps

Jorge Gonzalez + 2 · Published 2022-02-09 · Updated 2022-07-12 · CVE-2021-0060

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) SPS versions prior to SPS E5 04.01.04.516.0 Intel(R) SPS versions prior to SPS E5 04.04.04.033.0 Intel(R) SPS versions prior to SPS E5 04.04.03.281.0 Intel(R) SPS versions prior to SPS E5 03.01.03.116.0 Intel(R) SPS versions prior to SPS E3 05.01.04.309.0 Intel(R) SPS versions prior to SPS 02.04.00.101.0 Intel(R) SPS versions prior to SPS SoC-A 05.00.03.114.0 Intel(R) SPS versions prior to SPS SoC-X 04.00.04.326.0 Intel(R) SPS versions prior to SPS SoC-X 03.00.03.117.0 Intel(R) SPS versions prior to IGN E5 91.00.00.167.0 Intel(R) SPS versions prior to SPS PHI 03.01.03.078.0

Description Insufficient compartmentalization in the HECI subsystem for Intel(R) SPS may allow an authenticated user to potentially enable escalation of privilege via physical access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-0060

Affected Products

Intel(R) Sps

References · 4

• https://osv.dev/vulnerability/CVE-2021-0060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0060 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00470.html · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220210-0005 · Note