Vulnerability in Intel Ethernet_network_controller_e810-cam1
CVE-2023-22276
Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.
EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Intel Ethernet_network_controller_e810-cam1
- Intel Ethernet_network_controller_e810-cam1_firmware
- Intel Ethernet_network_controller_e810-cam2
- Intel Ethernet_network_controller_e810-cam2_firmware
- Intel Ethernet_network_controller_e810-xxvam2
- Intel Ethernet_network_controller_e810-xxvam2_firmware
- N/a Intel(r) Ethernet Controllers And Adapters E810 Series — versions before version 1.7.2.4
Weakness classification (CWE)
References
- secure@intel.com (Vendor Advisory)
- secure@intel.com
Frequently asked questions
- What is CVE-2023-22276?
- CVE-2023-22276 is a medium-severity vulnerability in Intel Ethernet_network_controller_e810-cam1, classified under CWE-421. CVSS score: 6.5/10. Published 2023-08-11.
- How severe is CVE-2023-22276?
- Medium severity. CVSS v3 base score is 6.5 out of 10.