CVE Feed

    Dashboard / CVE / CVE-2022-29515

    CVE-2022-29515

    Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.

    Published:Nov 11, 2022
    Last Modified:Feb 5, 2025
    EPS:Nov 11, 2022
    EPSS Score:0.00022
    CVSS Score:6

    Affected Products

    Vendor
    Intel
    Product
    Server Platform Services Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-29466 (CVSS 7.3) — Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authe…
    CVE-2022-26074 (CVSS 4.4) — Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_0…
    CVE-2019-11109 (CVSS 4.4) — Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 …
    CVE-2019-11090 (CVSS 5.9) — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70,…
    CVE-2018-12147 (CVSS 6.7) — Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platfo…
    CVE-2019-0099 (CVSS 6.8) — Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 ma…
    CVE-2018-12192 (CVSS 6.8) — Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R)…
    CVE-2018-12191 (CVSS 7.6) — Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel…
    CVE-2018-12208 (CVSS 7.6) — Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and …
    CVE-2018-12198 (CVSS 6) — Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High