Skip to content
OpenAdvisories
High WID-SEC-2024-1137 8 CVEs

Intel Ethernet Controller I225: Mehrere Schwachstellen

Published May 14, 2024 · Updated Nov 11, 2024 · Revision 2 · de-DE

Vendor: HP Vendor: Intel Product: Computer Product: Ethernet Controller

Summary

Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen im Intel Ethernet Controller I225 ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.

Product

Intel Ethernet Controller bezeichnet Netzwerkkarten (NIC) des Herstellers Intel.

Vulnerabilities 8

  • High 8.6
    CVE-2021-33141

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

  • High 8.4
    CVE-2021-33162

    Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware…

  • High 7.2
    CVE-2021-33145

    Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may …

  • High 7.2
    CVE-2021-33157

    Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageabi…

  • High 7.2
    CVE-2021-33158

    Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware…

  • High 7.2
    CVE-2021-33161

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

  • Medium 6.0
    CVE-2021-33142

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

  • Medium 5.3
    CVE-2021-33146

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

Revision history

  1. #2

    Prüfung Produkteintragung

  2. #1

    Initiale Fassung

References