CVE-2018-12198: Intel Server Platform Services Firmware

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.

Affected products

• Intel Server Platform Services Firmware: before sps_e5_04.00.04.393.0 (fixed in sps_e5_04.00.04.393.0)

Published 2019-03-14. Last modified 2026-06-17.