CVE-2021-0084: Input Validation
First published: Wed Aug 11 2021(Updated: )
Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Ethernet Controller E810 | <1.4.11 | |
| Intel Ethernet Network Controller E810 | ||
| Intel x722da2 | <1.3.19 | |
| Intel x722da2 firmware | ||
| Intel Ethernet Network Adapter X722DA4FH Firmware | <1.3.19 | |
| Intel Ethernet Network Adapter X722DA4FH Firmware | ||
| Intel Ethernet Network Adapter X722DA4G1P5 | <1.3.19 | |
| Intel Ethernet Network Adapter X722DA4G1P5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-0084?
CVE-2021-0084 is a vulnerability in the Intel Ethernet Controllers X722 and 800 series Linux RMDA driver that may allow an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2021-0084?
CVE-2021-0084 has a severity rating of 7.8 (high).
Which software is affected by CVE-2021-0084?
The Intel Ethernet Controller E810 Firmware up to version 1.4.11 and Intel X722da2 Firmware up to version 1.3.19 are affected.
How can an authenticated user exploit CVE-2021-0084?
An authenticated user can potentially enable escalation of privilege by exploiting CVE-2021-0084 through local access.
Where can I find more information about CVE-2021-0084?
You can find more information about CVE-2021-0084 at the following references: [NetApp Advisory](https://security.netapp.com/advisory/ntap-20210827-0008/) and [Intel SA-00515 Advisory](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html).
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel ethernet controller e810
- canonical/intel ethernet network controller e810
- canonical/intel x722da2
- canonical/intel x722da2 firmware
- canonical/intel ethernet network adapter x722da4fh firmware
- canonical/intel ethernet network adapter x722da4g1p5