CVE-2021-0002

CVE Database · CVE-2021-0002

CVE-2021-0002

· HIGHModified

CVSS v3.1

7.1

EPSS

0.33%

Published

Aug 11, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weaknesses (CWE)

CWE-754

Affected Products (6)

intel · ethernet_controller_e810_firmware (up to 1.4.11)vulnerable

intel · ethernet_controller_e810

fedoraproject · fedoravulnerable

References (10)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUZYFCI7N4TFZSIGA7WGZ4Q7V3EK76GH/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKMUMLUH6ENNMLGTJ5AFRF6764ILEMYJ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFLYHRQPDF6ZMESCI3HRNOP6D6GELPFR/

https://security.netapp.com/advisory/ntap-20210827-0008/

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUZYFCI7N4TFZSIGA7WGZ4Q7V3EK76GH/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKMUMLUH6ENNMLGTJ5AFRF6764ILEMYJ/

KEV Catalog EPSS Scores Vendors All CVEs