CVE-2019-0140

Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
intelethernet_controller_x710-tm4_firmware
𝑥
< 7.0
intelethernet_controller_x710-at2_firmware
𝑥
< 7.0
intelethernet_controller_xxv710-am2_firmware
𝑥
< 7.0
intelethernet_controller_xxv710-am1_firmware
𝑥
< 7.0
intelethernet_controller_x710-bm2_firmware
𝑥
< 7.0
intelethernet_controller_710-bm1_firmware
𝑥
< 7.0
intelethernet_700_series_software
𝑥
< 24.0
𝑥
= Vulnerable software versions