Lucene search

IntelCVE-2021-33128

HistoryAug 18, 2022 - 8:15 p.m.

CVE-2021-33128

2022-08-1820:15:09

intel

web.nvd.nist.gov

cve-2021-33128

intel

e810

ethernet

firmware

access control

denial of service

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

4.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Improper access control in the firmware for some Intel® E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable denial of service via local access.

Affected configurations

Nvd

Vulners

Node

intelethernet_controller_e810_firmwareRange<1.6.0.6

AND

intelethernet_controller_e810Match-

VendorProductVersionCPE
intelethernet_controller_e810_firmware*cpe:2.3:o:intel:ethernet_controller_e810_firmware:*:*:*:*:*:*:*:*
intelethernet_controller_e810-cpe:2.3:h:intel:ethernet_controller_e810:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	ethernet_controller_e810_firmware	*	cpe:2.3:o:intel:ethernet_controller_e810_firmware::::::::
intel	ethernet_controller_e810	-	cpe:2.3:h:intel:ethernet_controller_e810:-:::::::*

CNA Affected

[
  {
    "product": "Intel(R) E810 Ethernet Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 1.6.1.9"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html

Social References

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

4.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-33128