MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-28376

CVSS 6.5v3.1pub. 2023-11-14upd. 2024-11-21

Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Intel Ethernet Network Adapter E810 2cqda2

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 2cqda2 Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda1

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1 Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0 Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda2

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda2 Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0 Firmware

    OS
    Intel
    < 1.7.1

  • Intel Ethernet Network Adapter E810 Cqda2t

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda2t Firmware

    OS
    Intel
    < 1.7.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2025-24851MEDIUM6.7same product

Nieobsłużony wyjątek w firmware'u algunych kontrolerów Ethernet 100GbE Intel(R) E810 przed wersją cvl fw 1.7.8...

CVE-2025-32003MEDIUM6.0same product

Out-of-bounds read w oprogramowaniu sprzętowym niektórych 100GbE Intel(R) Ethernet Network Adapter E810 przed ...

CVE-2025-27243MEDIUM6.7same product

Out-of-bounds write w oprogramowaniu układu Intel(R) Ethernet Controller E810 przed wersją cvl fw 1.7.8.x w Ri...

CVE-2022-41314MEDIUM6.7same product

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user t...

CVE-2020-24500MEDIUM4.4same product

Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a pri...