Access Control Vulnerability in Intel Ethernet I210 Controller Series
CVE-2020-0525

4.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Ethernet I210 Controller Series Of Network Adapters
Vendor
CVE Published:
17 February 2021

What is CVE-2020-0525?

An improper access control vulnerability in the firmware of the Intel Ethernet I210 Controller series can potentially allow a privileged user to disrupt network operations through local access. This flaw affects all versions released before 3.30, making it essential for organizations utilizing these network adapters to apply the latest firmware updates to mitigate risks. For detailed information, please refer to Intel's security advisory.

Affected Version(s)

Intel(R) Ethernet I210 Controller series of network adapters before version 3.30

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.