Intel Ethernet Controller i210 Firmware vulnerabilities

4 CVEs affecting Intel Ethernet Controller i210 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0525, published 2021-02-17.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-0525, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via…
• CVE-2020-0523, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privileged user to enable a denial of service…
• CVE-2020-0522, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service…
• CVE-2020-0524, published 2021-02-17. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of…