Insufficient Access Control in Intel Ethernet Controllers
CVE-2020-24495

4.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) 700-series Of Ethernet Controllers
Vendor
CVE Published:
17 February 2021

What is CVE-2020-24495?

The firmware for Intel 700-series Ethernet Controllers prior to version 7.3 exhibits insufficient access control, potentially allowing a privileged user to enable denial of service via local access. This vulnerability could lead to significant disruptions in network availability, emphasizing the need for users to update to the latest firmware version to mitigate this risk.

Affected Version(s)

Intel(R) 700-series of Ethernet Controllers before version 7.3

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.