CVE-2023-33870

CVE-2023-33870 involves insecure inherited permissions in Intel® Ethernet tools and driver install software, enabling an authenticated user to potentially escalate privileges via local access. Affected components include: Intel® Ethernet Connections Boot Utility, Preboot Images, and EFI Drivers (...

CVE-2023-39432

CVE-2023-39432 affects Intel® Ethernet tools and driver install software prior to version 28.2, due to an improper access control element that could allow an authenticated local attacker to escalate privileges. Affected components include Intel® Ethernet Connections Boot Utility, Preboot Images, ...

CVE-2023-39432

Improper access control element in some IntelR Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access...

USN-6626-2: Linux kernel vulnerabilities

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...

Intel Ethernet Products Security Vulnerability

Intel Ethernet Products is a networking product from Intel Corporation. A security vulnerability exists in Intel Ethernet Products that stems from an insecure inherited privilege issue that could lead to privilege escalation through local access by an authenticated user...

CVE-2023-33870: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet Products Security Vulnerability

Intel Ethernet Products is a networking product from Intel Corporation. A security vulnerability exists in Intel Ethernet Products versions prior to 28.2, which stems from an issue with incorrect access control elements that could lead to privilege escalation via local access by an authenticated...

PT-2024-12448 · Intel · Intel Ethernet Tools/Driver Install

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet tools and driver install software affected versions not specified Description: The issue is related to insecure inherited permissions in some IntelR Ethernet tools and driver install software. This may allow an authenticated...

PT-2024-12809 · Intel · Intel Ethernet Tools/Driver Install

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet tools and driver install software versions prior to 28.2 Description: The issue is related to an improper access control element in some IntelR Ethernet tools and driver install software. This may allow an authenticated user t...

CVE-2023-39432: Improper Access Control

Improper access control element in some IntelR Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access...

Wago 750-88X and 750-89X Cross-site Scripting (CVE-2018-16210)

WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.1813 and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMPDESC or SNMPLOCSNMPCONT field. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

CVE-2024-24781

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

CVE-2024-24781

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

Denial of service

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

CVE-2024-24781 Hima: Uncontrolled Resource Consumption in multiple products

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

CVE-2024-24781 Hima: Uncontrolled Resource Consumption in multiple products

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

CVE-2024-24781

CVE-2024-24781 is an unauthenticated remote DoS via uncontrolled resource consumption that targets a single ethernet port. Connected sources tie this CVE to HIMA Paul Hildebrandt product lines (F Series and X Series) and describe a resource-management error enabling denial-of-service through exce...

CVE-2024-24781: Uncontrolled Resource Consumption

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port...

PT-2024-20558 · Hima · F-Com 01 +20

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can exploit an uncontrolled resource consumption issue to cause a denial-of-service DoS condition in affected devices...

Intel® Ethernet Tools and Driver Install Software Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet tools and driver install software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-39432 Description: Improper access contr...