CVE-2020-24494: Medium severity intel ethernet network adapter x722da2 firmware vulnerability
Published Feb 17, 2021
·Updated
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.
Affected Software
4 affected components
Intel Ethernet Network Adapter X722-da2 Firmware<1.4.3
Intel Ethernet Network Adapter X722-da2
Intel Ethernet Network Adapter X722-da4 Firmware<1.4.3
Intel Ethernet Network Adapter X722-da4
Remediation
Event History
Feb 17, 2021
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24494?
CVE-2020-24494 is classified as a high severity vulnerability due to the potential for denial of service.
2
How do I fix CVE-2020-24494?
To fix CVE-2020-24494, update your Intel Ethernet Controller firmware to version 1.4.3 or later.
3
What does CVE-2020-24494 affect?
CVE-2020-24494 affects the Intel Ethernet network adapters X722-DA2 and X722-DA4 with firmware versions prior to 1.4.3.
4
Can CVE-2020-24494 be exploited remotely?
CVE-2020-24494 requires local access for exploitation, making remote attacks unlikely.
5
Who is impacted by CVE-2020-24494?
Privileged users of systems utilizing affected Intel Ethernet controllers may be impacted by CVE-2020-24494.