Improper access control

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Session fixation

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Buffer overflow

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Design/Logic Flaw

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8691

CVE-2020-8691 is a vulnerability in the firmware of Intel(R) Ethernet 700 Series Controllers. The issue is a logic flaw in the firmware that may allow a privileged user to escalate privileges and/or cause a denial of service via local access. Affected products are Intel Ethernet 700 Series Contro...

CVE-2020-8691

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690

Intel Ethernet 700 Series Controllers prior to version 7.3 are affected by multiple CVEs (including CVE-2020-8690) due to a protection mechanism failure, firmware logic issues, and improper access control that could allow a local attacker to escalate privileges and/or cause denial of service. The...

CVE-2020-8690

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8692

Affected product : Intel® Ethernet 700 Series Controllers before version 7.3. Vulnerability : Insufficient access control in the firmware may let a privileged local user escalate privileges and cause a denial of service. Root cause : firmware‑level access control weakness. Impacted versions : pri...

CVE-2020-8691: Undefined Security Weakness

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8692: Undefined Security Weakness

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690: Undefined Security Weakness

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8693: Undefined Security Weakness

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

PT-2020-4902

Name of the Vulnerable Software and Affected Versions: Intel Ethernet 700 Series Controllers affected versions not specified Description: The issue is caused by a buffer overflow in memory, which may allow an attacker to cause a denial of service or escalate their privileges. A privileged user ca...

PT-2020-4898

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers affected versions not specified Description: A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or...

PT-2020-4899

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers. This may allow a privileged user to potentially enabl...

Intel® Ethernet 700 Series Controller Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...

PT-2020-4897

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to a protection mechanism failure, which may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loc...

PT-2020-6348

Name of the Vulnerable Software and Affected Versions Modicon M221 all versions Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description A CWE-326: Inadequate Encryption Strength issue exists that could allow an attacker to break the encryption key whe...

Microsoft Warns of Continued Exploitation of CVE-2020-1472

Microsoft has released a blog post on cyber threat actors exploiting CVE-2020-1472, an elevation of privilege vulnerability in Microsoft’s Netlogon. A remote attacker can exploit this vulnerability to breach unpatched Active Directory domain controllers and obtain domain administrator access. The...