Lucene search

K
nvd[email protected]NVD:CVE-2020-0524
HistoryFeb 17, 2021 - 2:15 p.m.

CVE-2020-0524

2021-02-1714:15:14
CWE-276
web.nvd.nist.gov
1
cve-2020-0524
intel ethernet i210 controller
firmware
default permissions
denial of service
local access

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.6%

Improper default permissions in the firmware for the Intelยฎ Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of service via local access.

Affected configurations

Nvd
Node
intelethernet_controller_i210_firmwareRange<3.30
AND
intelethernet_controller_i210-atMatch-
OR
intelethernet_controller_i210-clMatch-
OR
intelethernet_controller_i210-csMatch-
OR
intelethernet_controller_i210-isMatch-
OR
intelethernet_controller_i210-itMatch-
VendorProductVersionCPE
intelethernet_controller_i210_firmware*cpe:2.3:o:intel:ethernet_controller_i210_firmware:*:*:*:*:*:*:*:*
intelethernet_controller_i210-at-cpe:2.3:h:intel:ethernet_controller_i210-at:-:*:*:*:*:*:*:*
intelethernet_controller_i210-cl-cpe:2.3:h:intel:ethernet_controller_i210-cl:-:*:*:*:*:*:*:*
intelethernet_controller_i210-cs-cpe:2.3:h:intel:ethernet_controller_i210-cs:-:*:*:*:*:*:*:*
intelethernet_controller_i210-is-cpe:2.3:h:intel:ethernet_controller_i210-is:-:*:*:*:*:*:*:*
intelethernet_controller_i210-it-cpe:2.3:h:intel:ethernet_controller_i210-it:-:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.6%