Intel Ethernet Network Adapter E810 Firmware vulnerabilities

7 known vulnerabilities affecting intel/ethernet_network_adapter_e810_firmware.

Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM7

Vulnerabilities

Page 1 of 1
CVE-2020-24501MEDIUMCVSS 6.5fixed in 1.4.1.132021-02-17
CVE-2020-24501 [MEDIUM] CWE-120 CVE-2020-24501: Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may a Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
nvd
CVE-2020-24502MEDIUMCVSS 5.5fixed in 1.0.4fixed in 1.4.29.02021-02-17
CVE-2020-24502 [MEDIUM] CWE-20 CVE-2020-24502: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1. Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.
nvd
CVE-2020-24498MEDIUMCVSS 4.4fixed in 1.4.1.132021-02-17
CVE-2020-24498 [MEDIUM] CWE-120 CVE-2020-24498: Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may a Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
nvd
CVE-2020-24497MEDIUMCVSS 4.4fixed in 1.4.1.132021-02-17
CVE-2020-24497 [MEDIUM] CVE-2020-24497: Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1. Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
nvd
CVE-2020-24504MEDIUMCVSS 5.5fixed in 1.0.42021-02-17
CVE-2020-24504 [MEDIUM] CWE-400 CVE-2020-24504: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before ve Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
nvd
CVE-2020-24500MEDIUMCVSS 4.4fixed in 1.4.1.132021-02-17
CVE-2020-24500 [MEDIUM] CWE-120 CVE-2020-24500: Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may a Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local access.
nvd
CVE-2020-24503MEDIUMCVSS 5.5fixed in 1.0.42021-02-17
CVE-2020-24503 [MEDIUM] CVE-2020-24503: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
nvd