CVE-2025-27535: Exposed IOCTL with Insufficient Access Control

Exposed ioctl with insufficient access control in the firmware for some IntelR Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable...

EUVD-2022-39153

Malicious code in bioql PyPI...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...

PT-2025-21070 · Intel · Intel Ethernet Connection

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Connection software versions prior to 29.4 Description: The issue is related to an uncontrolled search path element in some IntelR Ethernet Connection software. This may allow an authenticated user to potentially enable...

CVE-2025-20015: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet Connection 代码问题漏洞

Intel Ethernet Connection is a family of Ethernet controllers from Intel Corporation USA. A code issue vulnerability exists in Intel Ethernet Connection versions prior to 29.4, which stems from improperly controlled search paths that could result in elevated privileges...

CVE-2023-34404

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection...

CVE-2024-39797

CVE-2024-39797 affects Intel® Ethernet Connection I219 Series drivers. The issue is improper access control in some drivers prior to version 12.19.1.39, which may allow an authenticated local user to potentially cause a denial of service. The Red Hat and Intel advisories corroborate this descript...

Intel Ethernet Connection I219 Series 安全漏洞

Intel Ethernet Connection I219 Series is an Ethernet controller from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Connection I219 Series versions prior to 12.19.1.39, which originates from a stack buffer overflow that results in a local denial of service...

CVE-2024-39779: Stack-based Buffer Overflow

Stack-based buffer overflow in some drivers for IntelR Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-39797: Improper Access Control

Improper access control in some drivers for IntelR Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access...

Intel®  Ethernet Connection I219 Series Software Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet Connection I219 Series may allow denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-39797 Description: Improper access control in some drivers for Intel®...

CVE-2024-21769

Uncontrolled search path in some IntelR Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21769

Uncontrolled search path in some IntelR Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21769

CVE-2024-21769 (Intel) describes an uncontrolled search path in the Windows installer for the Intel Ethernet Adapter Complete Driver Pack and the Intel(R) Ethernet Connection I219-LM installer. The weakness could allow an authenticated local attacker to escalate privileges. Intel’s advisory INTEL...

CVE-2024-21769: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access...

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the handling of multipart boundaries, where there is a lack of validation of the length of...

HPSBHF03635 rev. 3 - Intel 2019.2 IPU Ethernet 700 Series Controllers Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel® Ethernet 700 Series...

Unmasking mystery boxes on ship’s bridges

We pen test a variety of vessel and platform types across different fleets and operators. In every single test to date we have unearthed a system or device, that of the few crew that were aware, no-one could tell us what it is was for. In other scenarios an undocumented system or device would be...

CVE-2017-12725

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...