CVE-2022-36382
Medium
Description
Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.
SeverityMedium
CVSS6.0
Exploit probability—
ProductIntel Ethernet Network Controller E810-cam1 Firmware
PublishedFeb 16, 2023
First seenFeb 16, 2023
How to fix
Update
- intel ethernet_network_controller_e810-cam1_firmware1.7.0.8 or later
- intel ethernet_network_controller_e810-cam2_firmware1.7.0.8 or later
- intel ethernet_network_controller_e810-xxvam2_firmware1.7.0.8 or later
- intel ethernet_controller_x710-am2_firmware9.101 or later
- intel ethernet_controller_x710-bm2_firmware9.101 or later
- intel ethernet_controller_xl710-am1_firmware9.101 or later
- intel ethernet_controller_xl710-am2_firmware9.101 or later
- intel ethernet_controller_xl710-bm1_firmware9.101 or later
- intel ethernet_controller_xl710-bm2_firmware9.101 or later
- intel ethernet_controller_xxv710-am1_firmware9.101 or later
- intel ethernet_controller_xxv710-am2_firmware9.101 or later
- intel ethernet_converged_network_adapter_x710-da2_firmware9.101 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel ethernet_network_controller_e810-cam1_firmware | v < 1.7.0.8 | 1.7.0.8 |
| intel ethernet_network_controller_e810-cam2_firmware | v < 1.7.0.8 | 1.7.0.8 |
| intel ethernet_network_controller_e810-xxvam2_firmware | v < 1.7.0.8 | 1.7.0.8 |
| intel ethernet_controller_x710-am2_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_x710-bm2_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xl710-am1_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xl710-am2_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xl710-bm1_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xl710-bm2_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xxv710-am1_firmware | v < 9.101 | 9.101 |
| intel ethernet_controller_xxv710-am2_firmware | v < 9.101 | 9.101 |
| intel ethernet_converged_network_adapter_x710-da2_firmware | v < 9.101 | 9.101 |
| intel ethernet_converged_network_adapter_x710-da4_firmware | v < 9.101 | 9.101 |
| intel ethernet_converged_network_adapter_xl710-da1_firmware | v < 9.101 | 9.101 |
| intel ethernet_converged_network_adapter_xl710-da2_firmware | v < 9.101 | 9.101 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.