Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0…
Priority LOW 20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
Why it matters now
EPSS 0.00332 26th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) SPS | See provided reference | — | No fix listed | CNA |
- Intel(R) SPS Vendor— Affected See provided reference Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:* | sps_e5_04.00.00.000.0 to before sps_e5_04.01.04.275.0; sps_soc-a_04.00.00.000.0 to before sps_soc-a_04.00.04.191.0; sps_soc-x_04.00.00.000.0 to before sps_soc-x_04.00.04.100.0 | Vulnerable | Intel |
| cpe:2.3:o:f5:big-ip_b2250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_b2250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_b4300_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_b4300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_b4340n_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_b4340n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_b4450n_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_b4450n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10000s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
- cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:* Versions sps_e5_04.00.00.000.0 to before sps_e5_04.01.04.275.0; sps_soc-a_04.00.00.000.0 to before sps_soc-a_04.00.04.191.0; sps_soc-x_04.00.00.000.0 to before sps_soc-x_04.00.04.100.0 Vulnerable ·Intel
- cpe:2.3:o:f5:big-ip_b2250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_b2250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_b4300_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_b4300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_b4340n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_b4340n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_b4450n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_b4450n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10000s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:f5:big-ip_10000s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10050s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_10050s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10150v-n_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_10150v-n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10200v-s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_10200v-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10250v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_10250v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_10350v-n_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_10350v-n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_12250v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_12250v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:viprion_2200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:viprion_2200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i5600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i5800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i7600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i7800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i10600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i10800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i11600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i11600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i11800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i11800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i15600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i15600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:o:f5:big-ip_i15800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | F5 |
| cpe:2.3:h:f5:big-ip_i15800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 | Vulnerable | F5 |
- cpe:2.3:h:f5:big-ip_10000s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10050s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_10050s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10150v-n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_10150v-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10200v-s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_10200v-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10250v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_10250v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_10350v-n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_10350v-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_12250v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_12250v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:viprion_2200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:viprion_2200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i5600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i5800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i7600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i7800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i10600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i10800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i11600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i11600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i11800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i11800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i15600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i15600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:o:f5:big-ip_i15800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·F5
- cpe:2.3:h:f5:big-ip_i15800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.6.5; 12.1.0 – 12.1.5; 13.1.0 – 13.1.3; 14.1.0 – 14.1.2; 15.0.0 – 15.0.1 Vulnerable ·F5
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-11109
- 2026-10-03 Alias added: GHSA-9cxw-fmwg-5p6f
References
Sources
- CVE-2019-11109 · CVE Program
- CVE-2019-11109 · NVD
- FIRST EPSS
- GHSA-9cxw-fmwg-5p6f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences