Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0, SPSE304.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.
Improper initialization in subsystem for Intel(R) SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.