CVE-2021-33126
Medium
Description
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.
SeverityMedium
CVSS4.4
Exploit probability—
ProductIntel Ethernet Controller Xxv710 Firmware
PublishedAug 18, 2022
First seenAug 18, 2022
How to fix
Update
- intel ethernet_controller_xxv710_firmware8.5 or later
- intel ethernet_controller_xl710_firmware8.5 or later
- intel ethernet_controller_v710_firmware8.5 or later
- intel ethernet_controller_x710_firmware8.5 or later
- intel ethernet_network_adapter_x722da2_firmware1.5.5 or later
- intel ethernet_network_adapter_x722da4fh_firmware1.5.5 or later
- intel ethernet_network_adapter_x722da4g1p5_firmware1.5.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel ethernet_controller_xxv710_firmware | v < 8.5 | 8.5 |
| intel ethernet_controller_xl710_firmware | v < 8.5 | 8.5 |
| intel ethernet_controller_v710_firmware | v < 8.5 | 8.5 |
| intel ethernet_controller_x710_firmware | v < 8.5 | 8.5 |
| intel ethernet_network_adapter_x722da2_firmware | v < 1.5.5 | 1.5.5 |
| intel ethernet_network_adapter_x722da4fh_firmware | v < 1.5.5 | 1.5.5 |
| intel ethernet_network_adapter_x722da4g1p5_firmware | v < 1.5.5 | 1.5.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.