Lucene search

[email protected]CVE-2023-28376

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-28376

2023-11-1419:15:21

CWE-125

[email protected]

web.nvd.nist.gov

cve-2023-28376

intel

e810

ethernet controllers

firmware

vulnerability

nvd

denial of service

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Out-of-bounds read in the firmware for some Intel® E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Affected configurations

NVD

Node

intelethernet_network_adapter_e810-2cqda2Match-

AND

intelethernet_network_adapter_e810-2cqda2_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda1Match-

AND

intelethernet_network_adapter_e810-cqda1_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda1_for_ocpMatch-

AND

intelethernet_network_adapter_e810-cqda1_for_ocp_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda1_for_ocp_3.0Match-

AND

intelethernet_network_adapter_e810-cqda1_for_ocp_3.0_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda2Match-

AND

intelethernet_network_adapter_e810-cqda2_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda2_for_ocp_3.0Match-

AND

intelethernet_network_adapter_e810-cqda2_for_ocp_3.0_firmwareRange<1.7.1

Node

intelethernet_network_adapter_e810-cqda2tMatch-

AND

intelethernet_network_adapter_e810-cqda2t_firmwareRange<1.7.1

CPENameOperatorVersion
intel:ethernet_network_adapter_e810-2cqda2_firmwareintel ethernet network adapter e810-2cqda2 firmwarelt1.7.1

CPE	Name	Operator	Version
intel:ethernet_network_adapter_e810-2cqda2_firmware	intel ethernet network adapter e810-2cqda2 firmware	lt	1.7.1

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) E810 Ethernet Controllers and Adapters",
    "versions": [
      {
        "version": "before version 1.7.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

security.netapp.com/advisory/ntap-20231221-0007/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00869.html

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Related for CVE-2023-28376

nvd1 cvelist1 prion1 intel1