PT-2024-8893 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Published 2024-08-13 · Updated 2024-08-14 · CVE-2024-24983

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Intel(R) Ethernet Network Controllers and Adapters E810 Series versions prior to 4.4

Description: The issue is related to a protection mechanism failure in the firmware of some Intel Ethernet Network Controllers and Adapters. This failure may allow an unauthenticated user to potentially enable denial of service via network access. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations: For Intel(R) Ethernet Network Controllers and Adapters E810 Series versions prior to 4.4, update the firmware to version 4.4 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2024-10560

CVE-2024-24983

Affected Products

Intel Ethernet Network Controllers/Adapters E810 Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-24983 · Security Note
• https://bdu.fstec.ru/vul/2024-10560 · Security Note
• https://twitter.com/CVEnew/status/1823719119947972822 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html · Note
• https://vuldb.com/?id.274582 · Note