HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2019-0140

CVSS 8.8v3.1pub. 2019-11-14upd. 2024-11-21

Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Intel Ethernet 700 Series Software

    APP
    Intel
    < 24.0

  • Intel Ethernet Controller 710 Bm1

    HW
    Intel
    all versions

  • Intel Ethernet Controller 710 Bm1 Firmware

    OS
    Intel
    < 7.0

  • Intel Ethernet Controller X710 At2

    HW
    Intel
    all versions

  • Intel Ethernet Controller X710 At2 Firmware

    OS
    Intel
    < 7.0

  • Intel Ethernet Controller X710 Bm2

    HW
    Intel
    all versions

  • Intel Ethernet Controller X710 Bm2 Firmware

    OS
    Intel
    < 7.0

  • Intel Ethernet Controller X710 Tm4

    HW
    Intel
    all versions

  • Intel Ethernet Controller X710 Tm4 Firmware

    OS
    Intel
    < 7.0

  • Intel Ethernet Controller Xxv710 Am1

    HW
    Intel
    all versions

  • Intel Ethernet Controller Xxv710 Am1 Firmware

    OS
    Intel
    < 7.0

  • Intel Ethernet Controller Xxv710 Am2

    HW
    Intel
    all versions

  • Intel Ethernet Controller Xxv710 Am2 Firmware

    OS
    Intel
    < 7.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2019-0145HIGH7.8same product

Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an a...

CVE-2019-0142HIGH8.2same product

Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version...

CVE-2022-36382MEDIUM6.0same product

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before...

CVE-2021-0200MEDIUM6.7same product

Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow ...

CVE-2019-0143MEDIUM5.5same product

Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 ma...