CVE Vulnerabilities

CVE-2023-22276

Race Condition During Access to Alternate Channel

Published: Aug 11, 2023 | Modified: Nov 21, 2024
CVSS 3.x
4.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.

Weakness

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

Affected Software

NameVendorStart VersionEnd Version
Ethernet_network_controller_e810-xxvam2_firmwareIntel*1.7.2.4 (excluding)

References