CVE-2021-0200

Published: Nov 17, 2021Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.

Affected (11)

Products: Intel: Ethernet Controller V710 At2 Firmware, Ethernet Controller X710 Tm4 Firmware, Ethernet Controller X710 At2 Firmware, Ethernet Controller Xxv710 Am2 Firmware, Ethernet Controller Xxv710 Am1 Firmware, Ethernet Controller X710 Am2 Firmware, Ethernet Controller Xl710 Am1 Firmware, Ethernet Controller Xl710 Am2 Firmware, Ethernet Controller X710 Bm2 Firmware, Ethernet Controller Xl710 Bm2 Firmware, Ethernet Controller Xl710 Bm1 Firmware

Intel

11 products

Ethernet Controller V710 At2 Firmware

Ethernet Controller X710 Tm4 Firmware

Ethernet Controller X710 At2 Firmware

Ethernet Controller Xxv710 Am2 Firmware

Ethernet Controller Xxv710 Am1 Firmware

Ethernet Controller X710 Am2 Firmware

Ethernet Controller Xl710 Am1 Firmware

Ethernet Controller Xl710 Am2 Firmware

Ethernet Controller X710 Bm2 Firmware

Ethernet Controller Xl710 Bm2 Firmware

Ethernet Controller Xl710 Bm1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller V710 At2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller V710 At2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 Tm4 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller X710 Tm4	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 At2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller X710 At2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xxv710 Am2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xxv710 Am2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xxv710 Am1 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xxv710 Am1	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 Am2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller X710 Am2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Am1 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Am1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Am2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Am2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 Bm2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller X710 Bm2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Bm2 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Bm2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Bm1 Firmware	Before 8.2

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Bm1	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://security.netapp.com/advisory/ntap-20211210-0004/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20211210-0004/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.