PT-2022-4224 · Intel · Intel Ethernet 700 Series Controllers+2

Dmitry Shvarts + 1 · Published 2022-08-09 · Updated 2022-08-26 · CVE-2021-33126

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) 700 and 722 Series Ethernet Controllers and Adapters versions prior to 8.5 and 1.5.5

Description The issue is related to improper access control in the firmware of the affected devices, which may allow a privileged user to enable denial of service via local access. This could potentially be exploited to cause service disruptions.

Recommendations For versions prior to 8.5 and 1.5.5, update to version 8.5 or 1.5.5 or later to resolve the issue. As a temporary workaround, consider restricting local access to the devices to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2022-05072

CVE-2021-33126

Affected Products

Intel Ethernet 700 Series Controllers

Intel 700/722 Series Ethernet Adapters

Intel 722 Series Ethernet Controllers

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-33126 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33126 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05072 · Security Note
• https://t.me/cvenotify/35206 · Telegram Post
• https://t.me/cvenotify/34909 · Telegram Post