First published: Wed Nov 17 2021(Updated: )
Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Ethernet Controller v710-at2 firmware | <8.2 | |
Intel Ethernet Controller v710-at2 firmware | ||
Intel Ethernet Controller x710-tm4 | <8.2 | |
Intel Ethernet Controller x710-tm4 | ||
Intel Ethernet Controller x710-at2 | <8.2 | |
Intel Ethernet Controller x710-at2 | ||
Intel Ethernet Controller XXV710-AM2 | <8.2 | |
Intel Ethernet Controller xxv710-am2 firmware | ||
Intel Ethernet Controller XXV710-AM1 | <8.2 | |
Intel Ethernet Controller XXV710-AM1 Firmware | ||
Intel Ethernet Controller x710-am2 firmware | <8.2 | |
Intel Ethernet Controller XL710-AM2 | ||
Intel Ethernet Controller XL710 | <8.2 | |
Intel Ethernet Controller XL710 | ||
Intel Ethernet Controller x710-am2 firmware | <8.2 | |
Intel Ethernet Controller xl710-am2 firmware | ||
Intel Ethernet Controller x710-bm2 | <8.2 | |
Intel Ethernet Controller x710-bm2 firmware | ||
Intel Ethernet Controller xl710-bm2 firmware | <8.2 | |
Intel Ethernet Controller xl710-bm2 firmware | ||
Intel Ethernet Controller xl710-bm1 | <8.2 | |
Intel Ethernet Controller XL710-BM1 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this out-of-bounds write vulnerability in the Intel Ethernet 700 Series Controllers firmware is CVE-2021-0200.
CVE-2021-0200 has a severity level of medium (6.7).
Intel Ethernet Controller V710-at2 Firmware is affected by CVE-2021-0200 with versions up to 8.2.
A privileged user can potentially enable an escalation of privilege via local access using CVE-2021-0200.
More information about CVE-2021-0200 can be found on the NetApp security advisory [here](https://security.netapp.com/advisory/ntap-20211210-0004/) and the Intel security advisory [here](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html).