First published: Wed Feb 17 2021(Updated: )
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Ethernet 700 Series software | <7.3 | |
Intel Ethernet Network Adapter X710-AT2 | ||
Intel Ethernet Network Adapter X710-AM2 | ||
Intel Ethernet Network Adapter X710-AT2 | ||
Intel Ethernet Network Adapter X710-BM2 | ||
Intel Ethernet Network Adapter X710-DA2 for OCP | ||
Intel Ethernet Network Adapter X710-DA2 | ||
Intel Ethernet Network Adapter X710-DA2 for OCP | ||
Intel Ethernet Network Adapter X710-DA4 | ||
Intel Ethernet Network Adapter X710-DA4 | ||
Intel Ethernet network adapter x710-t2l | ||
Intel Ethernet Network Adapter X710-T2L for OCP 3.0 | ||
Intel Ethernet Network Adapter X710-T4 | ||
Intel Ethernet Network Adapter X710-T4L | ||
Intel Ethernet Network Adapter X710-T4L | ||
Intel Ethernet Network Adapter X710-TM4 | ||
Intel Ethernet Network Adapter X722-DA2 | ||
Intel Ethernet Network Adapter X722-DA4 | ||
Intel Ethernet network adapter XL710-AM1 | ||
Intel Ethernet Network Adapter XL710-AM2 | ||
Intel Ethernet Network Adapter XL710-BM1 | ||
Intel Ethernet network adapter xl710-bm2 | ||
Intel Ethernet Network Adapter XL710-QDA1 for Open Compute Project | ||
Intel Ethernet Network Adapter XL710-QDA1 for Open Compute Project | ||
Intel Ethernet Network Adapter XL710-QDA2 for Open Compute Project | ||
Intel Ethernet network adapter XL710-QDA2 | ||
Intel Ethernet network adapter xxv710-am1 | ||
Intel Ethernet network adapter xxv710-am2 | ||
Intel Ethernet Network Adapter XXV710-DA1 for OCP | ||
Intel Ethernet Network Adapter XXV710-DA1 | ||
Intel Ethernet Network Adapter XXV710-DA2 | ||
Intel Ethernet Network Adapter XXV710-DA2T | ||
Intel Ethernet Network Adapter XXV710-DAx for OCP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-24505 is classified as moderate.
To fix CVE-2020-24505, update the firmware of the Intel Ethernet Controllers to version 7.3 or later.
CVE-2020-24505 affects Intel Ethernet Controllers in the 700-series firmware before version 7.3.
CVE-2020-24505 requires local access to potentially enable a denial of service, making remote exploitation unlikely.
Privileged users with access to vulnerable Intel Ethernet 700-series devices are affected by CVE-2020-24505.