7.8

CVE-2021-0084

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Ethernet Controller E810 Firmware SwPlatformlinux Version < 1.4.11
   Intel ≫ Ethernet Controller E810 Version-
Intel ≫ X722da2 Firmware Version < 1.3.19
   Intel ≫ X722da2 Version-
Intel ≫ X722da4fh Firmware Version < 1.3.19
   Intel ≫ X722da4fh Version-
Intel ≫ X722da4g1p5 Firmware Version < 1.3.19
   Intel ≫ X722da4g1p5 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.147
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.