CVE-2023-22276

CVE Database · CVE-2023-22276

CVE-2023-22276

· MEDIUMModified

CVSS v3.1

6.5

EPSS

0.10%

Published

Aug 11, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weaknesses (CWE)

CWE-421CWE-362

Affected Products (6)

intel · ethernet_network_controller_e810-xxvam2_firmware (up to 1.7.2.4)vulnerable

intel · ethernet_network_controller_e810-xxvam2

intel · ethernet_network_controller_e810-cam1_firmware (up to 1.7.2.4)vulnerable

intel · ethernet_network_controller_e810-cam1

intel · ethernet_network_controller_e810-cam2_firmware (up to 1.7.2.4)vulnerable

intel · ethernet_network_controller_e810-cam2

References (4)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00835.html

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230915-0007/

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00835.html

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230915-0007/

KEV Catalog EPSS Scores Vendors All CVEs