CVE-2020-24495: Medium severity intel ethernet 700 series software vulnerability
Published Feb 17, 2021
·Updated
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
Affected Software
33 affected components
Intel Ethernet Network Adapter 700 Firmware<7.3
Intel Ethernet Network Adapter V710-at2
Intel Ethernet Network Adapter X710-am2
Intel Ethernet Network Adapter X710-at2
Intel Ethernet Network Adapter X710-bm2
Intel Ethernet Network Adapter X710-da2
Intel Ethernet Network Adapter X710-da2 For Ocp
Intel Ethernet Network Adapter X710-da2 For Ocp 3.0
Intel Ethernet Network Adapter X710-da4
Intel Ethernet Network Adapter X710-da4 For Ocp 3.0
Intel Ethernet Network Adapter X710-t2l
Intel Ethernet Network Adapter X710-t2l For Ocp 3.0
Intel Ethernet Network Adapter X710-t4
Intel Ethernet Network Adapter X710-t4l
Intel Ethernet Network Adapter X710-t4l For Ocp 3.0
Intel Ethernet Network Adapter X710-tm4
Intel Ethernet Network Adapter X722-da2
Intel Ethernet Network Adapter X722-da4
Intel Ethernet Network Adapter Xl710-am1
Intel Ethernet Network Adapter Xl710-am2
Intel Ethernet Network Adapter Xl710-bm1
Intel Ethernet Network Adapter Xl710-bm2
Intel Ethernet Network Adapter Xl710-qda1
Intel Ethernet Network Adapter Xl710-qda1 For Open Compute Project
Intel Ethernet Network Adapter Xl710-qda2 For Open Compute Project
Intel Ethernet Network Adapter Xlk710-qda2
Intel Ethernet Network Adapter Xxv710-am1
Intel Ethernet Network Adapter Xxv710-am2
Intel Ethernet Network Adapter Xxv710-da1
Intel Ethernet Network Adapter Xxv710-da1 For Ocp
Intel Ethernet Network Adapter Xxv710-da2
Intel Ethernet Network Adapter Xxv710-da2t
Intel Ethernet Network Adapter Xxv710-dax For Ocp
Remediation
Event History
Feb 17, 2021
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24495?
CVE-2020-24495 is rated as medium severity due to the potential for denial of service by a privileged user.
2
How do I fix CVE-2020-24495?
To mitigate CVE-2020-24495, update the firmware of the affected Intel Ethernet controllers to version 7.3 or later.
3
Which Intel devices are affected by CVE-2020-24495?
CVE-2020-24495 affects the Intel 700-series of Ethernet Controllers prior to version 7.3.
4
What impact does CVE-2020-24495 have on network security?
CVE-2020-24495 may allow a privileged user to cause a denial of service, disrupting network operations.
5
Is there a workaround for CVE-2020-24495?
There are no confirmed workarounds for CVE-2020-24495; updating firmware is the recommended action.