Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-0084

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access.

Published

2021-08-11T13:15:15.957

Last Modified

2024-11-21T05:41:49.020

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel ethernet_controller_e810_firmware < 1.4.11 Yes
Hardware intel ethernet_controller_e810 - No
Operating System intel x722da2_firmware < 1.3.19 Yes
Hardware intel x722da2 - No
Operating System intel x722da4fh_firmware < 1.3.19 Yes
Hardware intel x722da4fh - No
Operating System intel x722da4g1p5_firmware < 1.3.19 Yes
Hardware intel x722da4g1p5 - No
References