CVE Feed

    Dashboard / CVE / CVE-2022-26074

    CVE-2022-26074

    Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access.

    Published:Aug 18, 2022
    Last Modified:May 5, 2025
    EPS:Aug 18, 2022
    EPSS Score:0.0014
    CVSS Score:4.4

    Affected Products

    Vendor
    Intel
    Product
    Server Platform Services Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-459 Incomplete Cleanup

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-29515 (CVSS 6) — Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.0…
    CVE-2022-29466 (CVSS 7.3) — Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authe…
    CVE-2019-11109 (CVSS 4.4) — Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 …
    CVE-2019-11090 (CVSS 5.9) — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70,…
    CVE-2018-12147 (CVSS 6.7) — Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platfo…
    CVE-2019-0099 (CVSS 6.8) — Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 ma…
    CVE-2018-12192 (CVSS 6.8) — Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R)…
    CVE-2018-12191 (CVSS 7.6) — Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel…
    CVE-2018-12208 (CVSS 7.6) — Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and …
    CVE-2018-12198 (CVSS 6) — Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High