Medium WID-SEC-2024-0315 10 CVEs

Intel Ethernet Controller: Mehrere Schwachstellen ermöglichen Denial of Service

Published Feb 9, 2021 · Updated Feb 7, 2024 · Revision 2 · de-DE

Vendor: HP Vendor: Intel Product: Computer Product: Ethernet Controller

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Ethernet Controllern ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Intel Ethernet Controller ist eine Netzerkkarte (NIC) des Herstellers Intel.

Vulnerabilities 10

Unscored —

CVE-2020-24492

Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a pr…

Feb 17, 2021
Unscored —

CVE-2020-24493

Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may …

Feb 17, 2021
Unscored —

CVE-2020-24494

Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a …

Feb 17, 2021
Unscored —

CVE-2020-24495

Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may …

Feb 17, 2021
Unscored —

CVE-2020-24496

Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a pr…

Feb 17, 2021
Unscored —

CVE-2020-24497

Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a …

Feb 17, 2021
Unscored —

CVE-2020-24498

Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged u…

Feb 17, 2021
Unscored —

CVE-2020-24500

Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged u…

Feb 17, 2021
Unscored —

CVE-2020-24501

Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthentic…

Feb 17, 2021
Unscored —

CVE-2020-24505

Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 ma…

Feb 17, 2021

Revision history

2024-02-07 #2
Neue Updates von HP aufgenommen
2021-02-09 #1
Initiale Fassung

References

Intel Security Advisory: INTEL-SA-00456 vom 2021-02-09
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00456.html
Lenovo Security Advisory: LEN-51718 vom 2021-02-09
https://support.lenovo.com/de/de/product_security/ps500391-intel-ethernet-controllers-advisory
HP Security Bulletin HPSBHF03717 vom 2024-02-05
https://support.hp.com/us-en/document/ish_10111717-10111754-16/HPSBHF03717