CVE-2019-0140

Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.

Score

CVSS 3.1 8.8 High

Status

Modified - secure@intel.com

Published

2019-11-14

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Ethernet 700 Series Software (Intel)
• Ethernet Controller 710-bm1 Firmware (Intel)
• Ethernet Controller X710-at2 Firmware (Intel)
• Ethernet Controller X710-bm2 Firmware (Intel)
• Ethernet Controller X710-tm4 Firmware (Intel)
• Ethernet Controller Xxv710-am1 Firmware (Intel)
• Ethernet Controller Xxv710-am2 Firmware (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html