K28563873 : Intel Ethernet 700 Series Controllers vulnerabilities CVE-2020-8690, CVE-2020-8691, CVE-2020-8692, and CVE-2020-8693

Security Advisory Description

• CVE-2020-8690

Protection mechanism failure in Intel® Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

• CVE-2020-8691

A logic issue in the firmware of the Intel® Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

• CVE-2020-8692

Insufficient access control in the firmware of the Intel® Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

• CVE-2020-8693

Improper buffer restrictions in the firmware of the Intel® Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

Impact

An attacker can exploit the vulnerabilities to potentially enable escalation of privileges and/or denial of service (DoS) via local access.