← Vulnerability feed

Vulnerability record · CVE-2022-29515 · published 11 November 2022

CVE-2022-29515: Intel server platform services firmware memory leak vulnerability

Intel · Server Platform Services Firmware

Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.

5.5 CVSS 3.1 Medium EPSS 0.17% · top 93.8% CWE-401 · Memory leak
5.5CVSS 3.1 base score
0.17%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html Vendor Advisory

Track CVE-2022-29515 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2018-3643Intel converged security management engine firmware vulnerabilityA vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before ver…EPSS 0.48%7.8CVE-2017-5706Intel server platform services firmware memory buffer overflow vulnerabilityMultiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrar…EPSS 0.69%7.8CVE-2017-5709Intel server platform services firmware vulnerabilityMultiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via …EPSS 0.58%7.6CVE-2018-12191Intel converged security management engine firmware memory buffer overflow vulnerabilityBounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before ver…EPSS 0.48%7.6CVE-2018-12208Intel converged security management engine firmware memory buffer overflow vulnerabilityBuffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4…EPSS 0.51%7.3CVE-2018-3655Intel converged security management engine firmware vulnerabilityA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution E…EPSS 0.46%6.8CVE-2019-0099Intel server platform services firmware vulnerabilityInsufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to pote…EPSS 0.40%6.8CVE-2018-12192Intel converged security management engine firmware improper authentication vulnerabilityLogic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versio…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2022-29515), CISA KEV, FIRST EPSS (scores of 2026-10-01). This page is refreshed as NVD updates the record.