MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-22276

CVSS 6.5v3.1pub. 2023-08-11upd. 2024-11-21

Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

  • Intel Ethernet Network Controller E810 Cam1

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Cam1 Firmware

    OS
    Intel
    < 1.7.2.4

  • Intel Ethernet Network Controller E810 Cam2

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Cam2 Firmware

    OS
    Intel
    < 1.7.2.4

  • Intel Ethernet Network Controller E810 Xxvam2

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Xxvam2 Firmware

    OS
    Intel
    < 1.7.2.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSRace Condition
CWE
References

Related vulnerabilities

CVE-2022-36382MEDIUM6.0same product

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before...

CVE-2022-41314MEDIUM6.7same product

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user t...

CVE-2021-0197MEDIUM4.4same product

Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version ...

CVE-2021-0198MEDIUM4.4same product

Improper access control in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5...

CVE-2021-0199MEDIUM4.4same product

Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6...