PT-2021-12897 · Intel · Intel 722 Ethernet Controllers+1

Published 2021-08-11 · Updated 2021-09-14 · CVE-2021-0084

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver versions prior to 1.3.19

Description: The issue is related to improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations: For versions prior to 1.3.19, update to version 1.3.19 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-0084

Affected Products

Intel Ethernet Controllers 800 Series

Intel 722 Ethernet Controllers

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-0084 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0084 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20210827-0008 · Note
• https://t.me/cvenotify/19837 · Telegram Post
• https://t.me/cvenotify/19085 · Telegram Post
• https://t.me/cibsecurity/27143 · Telegram Post