medium6.7
CVE-2019-0139
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an es…
Impact
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Ethernet Controller X710-Tm4 Firmware | before 7.0 |
| Intel | Ethernet Controller X710-At2 Firmware | before 7.0 |
| Intel | Ethernet Controller Xxv710-Am2 Firmware | before 7.0 |
| Intel | Ethernet Controller Xxv710-Am1 Firmware | before 7.0 |
| Intel | Ethernet Controller X710-Bm2 Firmware | before 7.0 |
| Intel | Ethernet Controller 710-Bm1 Firmware | before 7.0 |
| Intel | Ethernet 700 Series Software | before 24.0 |
References
- NVD record
- CVE.org record
- https://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSS
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html
- https://support.f5.com/csp/article/K08441753?utm_source=f5support&%3Butm_medium=RSS
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html