Input validation

2021-02-1714:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Insufficient input validation in the firmware for Intel® 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.

CPENameOperatorVersion
ethernet_network_adapter_x722-da2_firmwarelt1.4.3
ethernet_network_adapter_x722-da4_firmwarelt1.4.3

CPE	Name	Operator	Version
	ethernet_network_adapter_x722-da2_firmware	lt	1.4.3
	ethernet_network_adapter_x722-da4_firmware	lt	1.4.3

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00456.html