CVE-2024-24983

Aug. 14, 2024, 5:49 p.m.

CVSS Score

6.5 / 10

Product(s) Impacted

Intel Ethernet Network Controllers and Adapters E810 Series

before 4.4

Description

Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access.

Weaknesses

CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

CWE ID: 693

Date

Published: Aug. 14, 2024, 2:15 p.m.

Last Modified: Aug. 14, 2024, 5:49 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secure@intel.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

Base Score

6.5

Exploitability Score

3.9

Impact Score

2.5

Base Severity

MEDIUM

CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html