PT-2025-32721 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet driver versions prior to 1.17.2 Description: An integer overflow or wraparound issue exists in the Linux kernel-mode driver for some IntelR 800 Series Ethernet. This may allow an authenticated user to potentially...

PT-2025-32720 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet versions prior to 1.17.2 Description: Insufficient control flow management exists in the Linux kernel-mode driver for some IntelR 800 Series Ethernet. This may allow an authenticated user to potentially escalate...

CVE-2025-22893: Insufficient Control Flow Management

Insufficient control flow management in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel 800 Series Ethernet 代码问题漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. An elevation of privilege vulnerability exists in Intel 800 Series Ethernet that stems from an unchecked exception condition, whi...

Intel 800 Series Ethernet 输入验证错误漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a...

Intel Intel 800 Series Ethernet 输入验证错误漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an integer overflow vulnerability that stems from an integer overflow or wrap-around error...

PT-2025-32724 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet versions prior to 1.17.2 Description: An improper check for unusual or exceptional conditions exists in the Linux kernel-mode driver. This may allow an authenticated user to potentially escalate privileges via local...

PT-2025-32728 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet driver versions prior to 1.17.2 Description: An integer overflow or wraparound issue exists in the Linux kernel-mode driver for some IntelR 800 Series Ethernet. This may allow an authenticated user to potentially...

CVE-2025-24303: Improper Check for Unusual or Exceptional Conditions

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24324: Integer Overflow or Wraparound

Integer overflow or wraparound in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel 800 Series Ethernet 输入验证错误漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an integer overflow vulnerability that originates from an integer overflow or wrap-around...

CVE-2025-24484: Improper Input Validation

Improper input validation in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20093: Improper Check for Unusual or Exceptional Conditions

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-23241: Integer Overflow or Wraparound

Integer overflow or wraparound in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-22836: Integer Overflow or Wraparound

Integer overflow or wraparound in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

FedRAMP at Startup Speed: Lessons Learned

For organizations eyeing the federal market, FedRAMP can feel like a gated fortress. With strict compliance requirements and a notoriously long runway, many companies assume the path to authorization is reserved for the well-resourced enterprise. But that's changing. In this post, we break down h...

Addressing API Security with NIST SP 800-228

According to the Wallarm Q1 2025 ThreatStats report, 70% of all application attacks target APIs. The industry can no longer treat API security as a sidenote; it’s time to treat it as the main event. NIST seems to be on board with this view, releasing the initial public draft of NIST SP 800-228, a...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2018-17932

JUUKO K-800 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc. is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running...

Meeting NIST API Security Guidelines with Wallarm

On March 25, 2025, NIST released the initial public draft of NIST SP 800-228, "Guidelines for API Protection for Cloud-Native Systems." The document provides a comprehensive framework for securing APIs in cloud-enabled environments. However, for organizations looking to align with these objective...