CVE-2023-22276
11.08.2023, 03:15
Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.
| Vendor | Product | Version |
|---|---|---|
| intel | ethernet_network_controller_e810-xxvam2_firmware | 𝑥 < 1.7.2.4 |
| intel | ethernet_network_controller_e810-cam1_firmware | 𝑥 < 1.7.2.4 |
| intel | ethernet_network_controller_e810-cam2_firmware | 𝑥 < 1.7.2.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-421 - Race Condition During Access to Alternate ChannelThe product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.