CVE-2019-0148: Missing Release of Resource after Effective Lifetime

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0139: Undefined Security Weakness

Insufficient access control in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access...

V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

CVE-2019-0150: Undefined Security Weakness

Insufficient access control in firmware IntelR Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0140: Buffer Copy without Checking Size of Input

Buffer overflow in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access...

CVE-2019-0147: Improper Input Validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0145: Buffer Copy without Checking Size of Input

Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2019-0144: Improper Handling of Exceptional Conditions

Unhandled exception in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0143: Improper Handling of Exceptional Conditions

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0146: Missing Release of Resource after Effective Lifetime

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0149: Improper Input Validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

PT-2019-4035

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to inadequate handling of exceptional states in the firmware of Intel Ethernet 700 Series Controllers. It may allow an attacker to cause a denial of...

PT-2019-4268

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 1.33.0.0 Description The issue is related to insufficient access control in the ilp60x64.sys driver, which may allow a privileged user to potentially enable escalation of privilege via...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

PT-2019-4270

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to a buffer overflow in the firmware of IntelR Ethernet 700 Series Controllers. This may allow an unauthenticated user, with adjacent access, to...

PT-2019-4042

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware of Intel Ethernet 700 Series Controllers. This can potentially allow a privileged user to cause a deni...

PT-2019-4267

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware, which may allow a privileged user to potentially enable an escalation of privilege, denial of service,...

PT-2019-4034

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions before 7.0 Description The issue is related to unhandled exceptions in Kernel-mode drivers, potentially allowing an authenticated user to enable a denial of service via local access. It is also...

2019.2 IPU – Intel® Ethernet 700 Series Controllers Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow an escalation of privilege, denial of service or information disclosure. Intel is releasing software and firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

HPSBHF03635 rev. 3 - Intel 2019.2 IPU Ethernet 700 Series Controllers Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel® Ethernet 700 Series...