CVE-2020-24505: Input Validation
Published Feb 17, 2021
·Updated
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
Affected Software
33 affected components
Intel Ethernet Network Adapter 700 Firmware<7.3
Intel Ethernet Network Adapter V710-at2
Intel Ethernet Network Adapter X710-am2
Intel Ethernet Network Adapter X710-at2
Intel Ethernet Network Adapter X710-bm2
Intel Ethernet Network Adapter X710-da2
Intel Ethernet Network Adapter X710-da2 For Ocp
Intel Ethernet Network Adapter X710-da2 For Ocp 3.0
Intel Ethernet Network Adapter X710-da4
Intel Ethernet Network Adapter X710-da4 For Ocp 3.0
Intel Ethernet Network Adapter X710-t2l
Intel Ethernet Network Adapter X710-t2l For Ocp 3.0
Intel Ethernet Network Adapter X710-t4
Intel Ethernet Network Adapter X710-t4l
Intel Ethernet Network Adapter X710-t4l For Ocp 3.0
Intel Ethernet Network Adapter X710-tm4
Intel Ethernet Network Adapter X722-da2
Intel Ethernet Network Adapter X722-da4
Intel Ethernet Network Adapter Xl710-am1
Intel Ethernet Network Adapter Xl710-am2
Intel Ethernet Network Adapter Xl710-bm1
Intel Ethernet Network Adapter Xl710-bm2
Intel Ethernet Network Adapter Xl710-qda1
Intel Ethernet Network Adapter Xl710-qda1 For Open Compute Project
Intel Ethernet Network Adapter Xl710-qda2 For Open Compute Project
Intel Ethernet Network Adapter Xlk710-qda2
Intel Ethernet Network Adapter Xxv710-am1
Intel Ethernet Network Adapter Xxv710-am2
Intel Ethernet Network Adapter Xxv710-da1
Intel Ethernet Network Adapter Xxv710-da1 For Ocp
Intel Ethernet Network Adapter Xxv710-da2
Intel Ethernet Network Adapter Xxv710-da2t
Intel Ethernet Network Adapter Xxv710-dax For Ocp
Remediation
Event History
Feb 17, 2021
CVE Published
via MITRE·01:42 PM
Data Sourced
via MITRE·01:42 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24505?
The severity of CVE-2020-24505 is classified as moderate.
2
How do I fix CVE-2020-24505?
To fix CVE-2020-24505, update the firmware of the Intel Ethernet Controllers to version 7.3 or later.
3
What components are affected by CVE-2020-24505?
CVE-2020-24505 affects Intel Ethernet Controllers in the 700-series firmware before version 7.3.
4
Can CVE-2020-24505 be exploited remotely?
CVE-2020-24505 requires local access to potentially enable a denial of service, making remote exploitation unlikely.
5
Who is affected by CVE-2020-24505?
Privileged users with access to vulnerable Intel Ethernet 700-series devices are affected by CVE-2020-24505.