K31445234 : Intel I210 network adapter vulnerability CVE-2020-0523

Security Advisory Description

Improper access control in the firmware for the Intel® Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privileged user to enable a denial of service via local access. (CVE-2020-0523)

Impact

The BIG-IP management network port uses the Intel 1210 network adapter. This vulnerability affects the BIG-IP management interface, including access to SSH and the Configuration utility. A complete compromise results in the loss of access to the management interface, but you can still access the BIG-IP system through the serial console interface, which is not part of the BIG-IP data path.

The following BIG-IP platforms contain the affected Intel 1210 adapter:

• BIG-IP i2xxx
• BIG-IP i4xxx
• BIG-IP i5xxx
• BIG-IP i7xxx
• BIG-IP i10xxx
• BIG-IP i11xxx