WID-SEC-W-2023-0362

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Intel Ethernet Controller: Mehrere Schwachstellen

view advisory published 2023-02-14

Ein Angreifer kann mehrere Schwachstellen in Intel Ethernet Controller ausnutzen, um seine Privilegien zu erhöhen und einen Denial of Service Zustand auszulösen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2022-41314UShigh7.8—
Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-36797USmedium5.5—
Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial…
CVE-2022-36416UShigh7.8—
Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escala…
CVE-2022-36382USmedium4.4—
Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and…
CVE-2022-27808UShigh7.8—
Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potenti…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan