CVE-2022-36382

published 2023-02-16

CVE-2022-36382: Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700…

Priority P4 12 medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I N A H

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
intel	ethernet_controller_x710-am2_firmware	< 9.101	9.101
intel	ethernet_controller_x710-bm2_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-am1_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-am2_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-bm1_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-bm2_firmware	< 9.101	9.101
intel	ethernet_controller_xxv710-am1_firmware	< 9.101	9.101
intel	ethernet_controller_xxv710-am2_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_x710-da2_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_x710-da4_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_xl710-da1_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_xl710-da2_firmware	< 9.101	9.101
intel	ethernet_network_controller_e810-cam1_firmware	< 1.7.0.8	1.7.0.8
intel	ethernet_network_controller_e810-cam2_firmware	< 1.7.0.8	1.7.0.8
intel	ethernet_network_controller_e810-xxvam2_firmware	< 1.7.0.8	1.7.0.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787