PT-2021-2095 · Intel+3 · Intel Ethernet E810 Adapter Drivers+3

Published 2021-02-09 · Updated 2021-11-09 · CVE-2020-24503

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel Ethernet E810 Adapter drivers for Linux versions prior to 1.0.4

Description: The issue is related to insufficient access control in the Intel Ethernet E810 Adapter drivers, which may allow an authenticated user to potentially enable information disclosure via local access. This could permit an attacker to gain unauthorized access to protected information.

Recommendations: For Intel Ethernet E810 Adapter drivers for Linux versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALSA-2021:4356

BDU:2021-00947

CESA-2021_4140

CESA-2021_4356

CVE-2020-24503

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

Affected Products

Almalinux

Centos

Intel Ethernet E810 Adapter Drivers

Red Hat

References · 57

• https://linux.oracle.com/errata/ELSA-2022-9365.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24503 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00947 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-24503 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24503 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-24503 · Security Note
• https://osv.dev/vulnerability/ALSA-2021:4356 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-4356.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9368.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24503 · Vendor Advisory
• https://vulners.com/cve/CVE-2020-24588 · Note
• https://vulners.com/cve/CVE-2020-24502 · Note
• https://vulners.com/cve/CVE-2021-31440 · Note
• https://vulners.com/cve/CVE-2020-29660 · Note