CVE-2023-28376

Published: Nov 14, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Affected (7)

Products: Intel: Ethernet Network Adapter E810 2cqda2 Firmware, Ethernet Network Adapter E810 Cqda1 Firmware, Ethernet Network Adapter E810 Cqda1 For Ocp Firmware, Ethernet Network Adapter E810 Cqda1 For Ocp 3.0 Firmware, Ethernet Network Adapter E810 Cqda2 Firmware, Ethernet Network Adapter E810 Cqda2 For Ocp 3.0 Firmware, Ethernet Network Adapter E810 Cqda2t Firmware

Intel

7 products

Ethernet Network Adapter E810 2cqda2 Firmware

Ethernet Network Adapter E810 Cqda1 Firmware

Ethernet Network Adapter E810 Cqda1 For Ocp Firmware

Ethernet Network Adapter E810 Cqda1 For Ocp 3.0 Firmware

Ethernet Network Adapter E810 Cqda2 Firmware

Ethernet Network Adapter E810 Cqda2 For Ocp 3.0 Firmware

Ethernet Network Adapter E810 Cqda2t Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 2cqda2 Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 2cqda2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda1 Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda1 For Ocp Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda1 For Ocp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0 Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda2 Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0 Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ethernet Network Adapter E810 Cqda2t Firmware	Before 1.7.1

Running on/with	Platform Versions
Intel Ethernet Network Adapter E810 Cqda2t	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (4)

https://security.netapp.com/advisory/ntap-20231221-0007/

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00869.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20231221-0007/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00869.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.