CVE-2022-36382: Intel Ethernet Controller x710-AM2 Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

Affected products

• Intel Ethernet Controller x710-AM2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller x710-BM2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XL710-AM1 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XL710-AM2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XL710-BM1 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XL710-BM2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XXV710-AM1 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Controller XXV710-AM2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Converged Network Adapter x710-DA2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Converged Network Adapter x710-DA4 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Converged Network Adapter XL710-DA1 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Converged Network Adapter XL710-DA2 Firmware: before 9.101 (fixed in 9.101)
• Intel Ethernet Network Controller e810-CAM1 Firmware: before 1.7.0.8 (fixed in 1.7.0.8)
• Intel Ethernet Network Controller e810-CAM2 Firmware: before 1.7.0.8 (fixed in 1.7.0.8)
• Intel Ethernet Network Controller e810-XXVAM2 Firmware: before 1.7.0.8 (fixed in 1.7.0.8)

Published 2023-02-16. Last modified 2026-06-17.