CVE-2020-0524

Published: Feb 17, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of service via local access.

Affected (1)

Products: Intel: Ethernet Controller I210 Firmware

Intel

1 product

Ethernet Controller I210 Firmware

Configuration A

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller I210 Firmware	Before 3.30

Running on/with	Platform Versions
Intel Ethernet Controller I210 At	All versions
Intel Ethernet Controller I210 Cl	All versions
Intel Ethernet Controller I210 Cs	All versions
Intel Ethernet Controller I210 Is	All versions
Intel Ethernet Controller I210 It	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.