CVE-2022-36382

Published: Feb 16, 2023Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

Affected (15)

Intel

15 products

Ethernet Network Controller E810 Cam1 Firmware

Ethernet Network Controller E810 Cam2 Firmware

Ethernet Network Controller E810 Xxvam2 Firmware

Ethernet Controller X710 Am2 Firmware

Ethernet Controller X710 Bm2 Firmware

Ethernet Controller Xl710 Am1 Firmware

Ethernet Controller Xl710 Am2 Firmware

Ethernet Controller Xl710 Bm1 Firmware

Ethernet Controller Xl710 Bm2 Firmware

Ethernet Controller Xxv710 Am1 Firmware

Ethernet Controller Xxv710 Am2 Firmware

Ethernet Converged Network Adapter X710 Da2 Firmware

Ethernet Converged Network Adapter X710 Da4 Firmware

Ethernet Converged Network Adapter Xl710 Da1 Firmware

Ethernet Converged Network Adapter Xl710 Da2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Controller E810 Cam1 Firmware	Before 1.7.0.8

Running on/with	Platform Versions
Intel Ethernet Network Controller E810 Cam1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Controller E810 Cam2 Firmware	Before 1.7.0.8

Running on/with	Platform Versions
Intel Ethernet Network Controller E810 Cam2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Controller E810 Xxvam2 Firmware	Before 1.7.0.8

Running on/with	Platform Versions
Intel Ethernet Network Controller E810 Xxvam2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 Am2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller X710 Am2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller X710 Bm2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller X710 Bm2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Am1 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Am1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Am2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Am2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Bm1 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Bm1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xl710 Bm2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xl710 Bm2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xxv710 Am1 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xxv710 Am1	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Controller Xxv710 Am2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Controller Xxv710 Am2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Converged Network Adapter X710 Da2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Converged Network Adapter X710 Da2	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Converged Network Adapter X710 Da4 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Converged Network Adapter X710 Da4	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Converged Network Adapter Xl710 Da1 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Converged Network Adapter Xl710 Da1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Converged Network Adapter Xl710 Da2 Firmware	Before 9.101

Running on/with	Platform Versions
Intel Ethernet Converged Network Adapter Xl710 Da2	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html

Source: secure@intel.com

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.