WID-SEC-W-2024-0315

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Intel Ethernet Controller: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2021-02-09

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Ethernet Controllern ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (10)

Related CVEs.

IDseverity exploitable
CVE-2020-24505USmedium4.4—
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of ser…
CVE-2020-24501USmedium6.5—
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial of service via adjacen…
CVE-2020-24500USmedium4.4—
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local acces…
CVE-2020-24498USmedium4.4—
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
CVE-2020-24497USmedium4.4—
Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via l…
CVE-2020-24496USmedium4.4—
Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via loc…
CVE-2020-24495USmedium4.4—
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of servi…
CVE-2020-24494USmedium4.4—
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via l…
CVE-2020-24493USmedium4.4—
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged user to potentially enable denial of servi…
CVE-2020-24492USmedium4.4—
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via l…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan