Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege a...

CVE-2020-0586 · published 6 years ago
Summary

Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
intel server_platform_services >= sps_e3_04.00.00.000.0, < sps_e3_04.01.04.109.0
>= sps_e3_04.08.00.000.0, < sps_e3_04.08.04.070.0
>= sps_e5_04.00.00.000.0, < sps_e5_04.01.04.380.0
>= sps_soc-a_04.00.00.000.0, < sps_soc-a_04.00.04.211.0
>= sps_soc-x_04.00.00.000.0, < sps_soc-x_04.00.04.128.0
cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*
Original advisory text
Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege a...
Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-665Improper Initialization
Timeline
Published15 Jun 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-0586 · NVD
Track software like this
Free during beta