Design/Logic Flaw

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Buffer overflow

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Session fixation

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8691

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8691

CVE-2020-8691 is a vulnerability in the firmware of Intel(R) Ethernet 700 Series Controllers. The issue is a logic flaw in the firmware that may allow a privileged user to escalate privileges and/or cause a denial of service via local access. Affected products are Intel Ethernet 700 Series Contro...

CVE-2020-8690

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690

Intel Ethernet 700 Series Controllers prior to version 7.3 are affected by multiple CVEs (including CVE-2020-8690) due to a protection mechanism failure, firmware logic issues, and improper access control that could allow a local attacker to escalate privileges and/or cause denial of service. The...

CVE-2020-8692

Affected product : Intel® Ethernet 700 Series Controllers before version 7.3. Vulnerability : Insufficient access control in the firmware may let a privileged local user escalate privileges and cause a denial of service. Root cause : firmware‑level access control weakness. Impacted versions : pri...

CVE-2020-8691: Undefined Security Weakness

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8692: Undefined Security Weakness

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8693: Undefined Security Weakness

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690: Undefined Security Weakness

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Intel® Ethernet 700 Series Controller Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...

PT-2020-4899

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers. This may allow a privileged user to potentially enabl...

PT-2020-4897

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to a protection mechanism failure, which may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loc...

PT-2020-4902

Name of the Vulnerable Software and Affected Versions: Intel Ethernet 700 Series Controllers affected versions not specified Description: The issue is caused by a buffer overflow in memory, which may allow an attacker to cause a denial of service or escalate their privileges. A privileged user ca...

PT-2020-6348

Name of the Vulnerable Software and Affected Versions Modicon M221 all versions Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description A CWE-326: Inadequate Encryption Strength issue exists that could allow an attacker to break the encryption key whe...

PT-2020-4898

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers affected versions not specified Description: A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or...

Microsoft Warns of Continued Exploitation of CVE-2020-1472

Microsoft has released a blog post on cyber threat actors exploiting CVE-2020-1472, an elevation of privilege vulnerability in Microsoft’s Netlogon. A remote attacker can exploit this vulnerability to breach unpatched Active Directory domain controllers and obtain domain administrator access. The...

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS DoS (cisco-sa-mdns-dos-3tH6cA9J)

A denial of service DoS vulnerability exists in Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers due to improper validation of mDNS packets. An unauthenticated, remote attacker can exploit this issue, via a crafted mDNS packet to an affected device, to cause the device to...