CVE-2019-0140: Intel Ethernet 700 Series Software

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.

Affected products

• Intel Ethernet 700 Series Software: before 24.0 (fixed in 24.0)
• Intel Ethernet Controller 710-BM1 Firmware: before 7.0 (fixed in 7.0)
• Intel Ethernet Controller x710-AT2 Firmware: before 7.0 (fixed in 7.0)
• Intel Ethernet Controller x710-BM2 Firmware: before 7.0 (fixed in 7.0)
• Intel Ethernet Controller x710-TM4 Firmware: before 7.0 (fixed in 7.0)
• Intel Ethernet Controller XXV710-AM1 Firmware: before 7.0 (fixed in 7.0)
• Intel Ethernet Controller XXV710-AM2 Firmware: before 7.0 (fixed in 7.0)

Published 2019-11-14. Last modified 2026-06-17.