CVE-2020-24503: Medium severity intel ethernet network adapter e810 firmware vulnerability
Description: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
References:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html
Other sources
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-24503?
CVE-2020-24503 has a medium severity rating due to insufficient access control allowing information disclosure.
How do I fix CVE-2020-24503?
To fix CVE-2020-24503, update the Intel Ethernet E810 Adapter drivers to version 1.0.4 or later.
Which systems are affected by CVE-2020-24503?
CVE-2020-24503 affects Intel Ethernet E810 Adapter drivers for Linux prior to version 1.0.4.
What kind of information can be disclosed due to CVE-2020-24503?
CVE-2020-24503 may allow authenticated users to disclose sensitive information through local access.
Is there a patch available for CVE-2020-24503?
Yes, a patch is available in the updates for the Intel Ethernet E810 Adapter drivers starting from version 1.0.4.