Intel Ethernet Network Adapter e810 Firmware vulnerabilities

7 CVEs affecting Intel Ethernet Network Adapter e810 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24504, published 2021-02-17.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24501, published 2021-02-17. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2020-24503, published 2021-02-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-24502, published 2021-02-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable…
• CVE-2020-24497, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
• CVE-2020-24504, published 2021-02-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local…
• CVE-2020-24500, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local access.
• CVE-2020-24498, published 2021-02-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.