K91610944 : Intel Ethernet controller vulnerabilities CVE-2020-24492, CVE-2020-24493, CVE-2020-24494, CVE-2020-24495, CVE-2020-24496

Security Advisory Description

• CVE-2020-24492

Insufficient access control in the firmware for the Intel® 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via local access.

• CVE-2020-24493

Insufficient access control in the firmware for the Intel® 700-series of Ethernet Controllers before version 8.0 may allow a privileged user to potentially enable denial of service via local access.

• CVE-2020-24494

Insufficient access control in the firmware for the Intel® 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.

• CVE-2020-24495

Insufficient access control in the firmware for the Intel® 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.

• CVE-2020-24496

Insufficient input validation in the firmware for Intel® 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.

Impact

This vulnerability may allow a privileged user to enable a denial-of-service (DOS) attack using local access.