CVE-2025-27243: Medium severity Intel Ethernet Controller E810 vulnerability
Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27243?
CVE-2025-27243 has a high severity rating due to its potential to cause denial of service.
How do I fix CVE-2025-27243?
To fix CVE-2025-27243, update the firmware of the Intel Ethernet Controller E810 to version cvl fw 1.7.8.x or later.
What impact does CVE-2025-27243 have on my system?
CVE-2025-27243 may allow a denial of service if exploited by a privileged user with low complexity attack methods.
Which devices are affected by CVE-2025-27243?
CVE-2025-27243 affects Intel Ethernet Controller E810 devices running firmware versions prior to cvl fw 1.7.8.x.
Is CVE-2025-27243 easy to exploit?
CVE-2025-27243 can be exploited with relatively low complexity, making it a significant vulnerability.