intel server platform services firmware

Name: intel server platform services firmware
Brand: intel

productUS

cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical6high9medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-11090US	medium5.9	2.71% (86th)	—	sps_soc-x_04.00.04.108.0	2019-12-18	5 versions
CVE-2017-5706US	high7.8OT elevated	0.69% (53rd)	—	no fix	2017-11-21	= 4.0
CVE-2017-5709US	high7.8	0.58% (47th)	—	no fix	2017-11-21	= 4.0
CVE-2018-12208US	high7.6	0.51% (43rd)	—	5.00.04.012	2019-03-14	< 5.00.04.012
CVE-2018-12191US	high7.6	0.48% (41st)	—	4.00.04.383	2019-03-14	2 versions
CVE-2018-3643US	high8.2	0.48% (41st)	—	4.00.04	2018-09-12	< 4.00.04
CVE-2018-12192US	medium6.8	0.47% (40th)	—	sps_e5_04.00.04.393.0	2019-03-14	< sps_e5_04.00.04.393.0
CVE-2018-3655US	high7.3	0.46% (40th)	—	4.0	2018-09-12	< 4.0
CVE-2018-12147US	medium6.7	0.46% (40th)	—	4.0	2019-06-13	< 4.0
CVE-2019-0099US	medium6.8	0.40% (34th)	—	sps_e3_05.00.04.027.0	2019-05-17	< sps_e3_05.00.04.027.0
CVE-2018-12198US	medium6.0	0.34% (27th)	—	sps_e5_04.00.04.393.0	2019-03-14	< sps_e5_04.00.04.393.0
CVE-2019-11109US	medium4.4	0.33% (26th)	—	sps_soc-a_04.00.04.191.0	2019-12-18	3 versions
CVE-2022-26074US	medium4.4	0.21% (10th)	—	sps_e3_04.08.04.330.0	2022-08-18	3 versions
CVE-2022-29515US	medium5.5	0.18% (8th)	—	sps_e3_06.00.03.035.0	2022-11-11	< sps_e3_06.00.03.035.0
CVE-2022-29466US	medium5.5	0.18% (7th)	—	sps_e3_04.01.04.700.0	2022-11-11	< sps_e3_04.01.04.700.0

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-264CWE-2642 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-310CWE-3101 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.