Intel Ethernet Controller x710-BM2 Firmware vulnerabilities

13 CVEs affecting Intel Ethernet Controller x710-BM2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36382, published 2023-02-16.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0140, published 2019-11-14. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.
• CVE-2019-0145, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
• CVE-2019-0142, published 2019-11-14. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via…
• CVE-2019-0139, published 2019-11-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of…
• CVE-2019-0149, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local…
• CVE-2019-0148, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
• CVE-2019-0147, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local…
• CVE-2019-0146, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
• CVE-2019-0150, published 2019-11-14. Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access.
• CVE-2019-0144, published 2019-11-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access.

Latest

• CVE-2022-36382, published 2023-02-16. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before…
• CVE-2021-0200, published 2021-11-17. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.
• CVE-2019-0143, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.