Intel Ethernet Controller vulnerabilities

4 CVEs affecting Intel Ethernet Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-32003, published 2026-02-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32003, published 2026-02-10. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds read in the firmware for some 100GbE Intel(R) Ethernet Network Adapter E810 before version cvl fw 1.7.6, cpk 1.3.7 within Ring 0: Bare Metal OS may allow a denial of service. Network…
CVE-2025-24851, published 2026-02-10. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software…
CVE-2025-27243, published 2026-02-10. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with…
CVE-2025-27535, published 2026-02-10. Medium severity, CVSS 4.1. EPSS: 0.1% chance of exploitation in the next 30 days. Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service.…