CVE-2020-24509

Published: Jun 9, 2021Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (4)

Products: Intel: Server Platform Services

Intel

1 product

Server Platform Services

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Server Platform Services	Before sps_soc-a_05.00.03.091.0
Intel Server Platform Services	Version sps_e3_05.01.04.300.0
Intel Server Platform Services	Version sps_e5_04.04.03.263.0
Intel Server Platform Services	Version sps_e5_04.04.04.023.0

References (4)

https://security.netapp.com/advisory/ntap-20210611-0003/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20210611-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.