Intel Ethernet Controller X710-At2 Firmware vulnerabilities

CVE-2021-0200 [MEDIUM] CWE-787 CVE-2021-0200: Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.

CVE-2019-0140 [HIGH] CWE-120 CVE-2019-0140: Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allo Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.

CVE-2019-0142 [HIGH] CVE-2019-0142: Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers befo Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2019-0145 [HIGH] CWE-120 CVE-2019-0145: Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVE-2019-0148 [MEDIUM] CWE-772 CVE-2019-0148: Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may al Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0144 [MEDIUM] CWE-755 CVE-2019-0144: Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0146 [MEDIUM] CWE-772 CVE-2019-0146: Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0143 [MEDIUM] CWE-755 CVE-2019-0143: Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions bef Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0139 [MEDIUM] CVE-2019-0139: Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.

CVE-2019-0149 [MEDIUM] CWE-20 CVE-2019-0149: Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions b Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0147 [MEDIUM] CWE-20 CVE-2019-0147: Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions b Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

CVE-2019-0150 [MEDIUM] CVE-2019-0150: Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access.