CVE-2019-0142: Intel Ethernet 700 Series Software

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Ethernet 700 Series Software: before 24.0 (fixed in 24.0)
• Intel Ethernet Controller 710-BM1 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)
• Intel Ethernet Controller x710-AT2 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)
• Intel Ethernet Controller x710-BM2 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)
• Intel Ethernet Controller x710-TM4 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)
• Intel Ethernet Controller XXV710-AM1 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)
• Intel Ethernet Controller XXV710-AM2 Firmware: before 1.33.0.0 (fixed in 1.33.0.0)

Published 2019-11-14. Last modified 2026-06-17.