Lucene search

[email protected]CVE-2020-24502

HistoryFeb 17, 2021 - 2:15 p.m.

CVE-2020-24502

2021-02-1714:15:18

CWE-20

[email protected]

web.nvd.nist.gov

cve-2020-24502

intel

ethernet

e810

adapter

drivers

input validation

denial of service

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

Percentile

12.6%

JSON

Improper input validation in some Intel® Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.

Affected configurations

NVD

Node

intelethernet_network_adapter_e810_firmwareRange<1.0.4linux

AND

intelethernet_network_adapter_e810-cqda1Match-

intelethernet_network_adapter_e810-cqda1_for_ocpMatch-

intelethernet_network_adapter_e810-cqda1_for_ocp_3.0Match-

intelethernet_network_adapter_e810-cqda2Match-

intelethernet_network_adapter_e810-cqda2_for_ocp_3.0Match-

intelethernet_network_adapter_e810-xxvda2Match-

intelethernet_network_adapter_e810-xxvda2_for_ocpMatch-

intelethernet_network_adapter_e810-xxvda2_for_ocp_3.0Match-

intelethernet_network_adapter_e810-xxvda4Match-

Node

intelethernet_network_adapter_e810_firmwareRange<1.4.29.0windows

AND

intelethernet_network_adapter_e810-cqda1Match-

intelethernet_network_adapter_e810-cqda1_for_ocpMatch-

intelethernet_network_adapter_e810-cqda1_for_ocp_3.0Match-

intelethernet_network_adapter_e810-cqda2Match-

intelethernet_network_adapter_e810-cqda2_for_ocp_3.0Match-

intelethernet_network_adapter_e810-xxvda2Match-

intelethernet_network_adapter_e810-xxvda2_for_ocpMatch-

intelethernet_network_adapter_e810-xxvda2_for_ocp_3.0Match-

intelethernet_network_adapter_e810-xxvda4Match-

CNA Affected

[
  {
    "product": "Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 1.0.4 and before version 1.4.29.0 for Windows"
      }
    ]
  }
]