VulnerabilityModified
CVE-2022-36382
Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially…
MEDIUM 4.4EPSS 0.19%
Does this matter?
Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.
Description
Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.
- CVSS 3.1
- 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.19% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- intel/ethernet network controller e810-cam1 firmware · intel/ethernet network controller e810-cam2 firmware · intel/ethernet network controller e810-xxvam2 firmware · intel/ethernet controller x710-am2 firmware · intel/ethernet controller x710-bm2 firmware · intel/ethernet controller xl710-am1 firmware · intel/ethernet controller xl710-am2 firmware · intel/ethernet controller xl710-bm1 firmware · intel/ethernet controller xl710-bm2 firmware · intel/ethernet controller xxv710-am1 firmware · intel/ethernet controller xxv710-am2 firmware · intel/ethernet converged network adapter x710-da2 firmware · intel/ethernet converged network adapter x710-da4 firmware · intel/ethernet converged network adapter xl710-da1 firmware · intel/ethernet converged network adapter xl710-da2 firmware
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.