First published: Wed Feb 17 2021(Updated: )
Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Ethernet network adapter E810 firmware | <1.4.1.13 | |
Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
Intel Ethernet Network Adapter E810-CQDA1 | ||
Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
Intel Ethernet Network Adapter E810-CQDA2 for OCP 3.0 | ||
Intel Ethernet Network Controllers and Adapters E810 Series | ||
Intel Ethernet Network Adapter E810-XXVDA2 for OCP | ||
Intel Ethernet Network Adapter E810-XXVDA2 | ||
Intel Ethernet Network Adapter E810-XXVDA2 | ||
Intel Ethernet Network Controllers and Adapters E810 Series |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-24497 refers to the vulnerability of insufficient access control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13.
CVE-2020-24497 may allow a privileged user to potentially enable denial of service via local access.
The severity of CVE-2020-24497 is medium, with a severity value of 4.4.
The firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 is affected by CVE-2020-24497.
To fix CVE-2020-24497, it is recommended to update the firmware of Intel(R) E810 Ethernet Controllers to version 1.4.1.13 or newer.