HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-0084

CVSS 7.8v3.1pub. 2021-08-11upd. 2024-11-21

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Intel Ethernet Controller E810

    HW
    Intel
    all versions

  • Intel Ethernet Controller E810 Firmware

    OS
    Intel
    < 1.4.11

  • Intel X722da2

    HW
    Intel
    all versions

  • Intel X722da2 Firmware

    OS
    Intel
    < 1.3.19

  • Intel X722da4fh

    HW
    Intel
    all versions

  • Intel X722da4fh Firmware

    OS
    Intel
    < 1.3.19

  • Intel X722da4g1p5

    HW
    Intel
    all versions

  • Intel X722da4g1p5 Firmware

    OS
    Intel
    < 1.3.19
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-0002HIGH7.1same product

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11...

CVE-2022-41314MEDIUM6.7same product

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user t...

CVE-2022-28709MEDIUM4.4same product

Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may...

CVE-2021-33128MEDIUM4.4same product

Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may...

CVE-2021-0004MEDIUM4.4same product

Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associat...