VulnerabilityModified
CVE-2021-33126
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.
MEDIUM 4.4EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.
- CVSS 3.1
- 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Affected
- intel/ethernet controller xxv710 firmware · intel/ethernet controller xl710 firmware · intel/ethernet controller v710 firmware · intel/ethernet controller x710 firmware · intel/ethernet network adapter x722da2 firmware · intel/ethernet network adapter x722da4fh firmware · intel/ethernet network adapter x722da4g1p5 firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.