PT-2025-6647 · Intel · Intel 800 Series Ethernet Driver

Published 2025-02-11 · Updated 2025-02-14 · CVE-2024-36274

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack versions prior to 29.1

Description The issue is related to an out-of-bounds write in the Intel(R) 800 Series Ethernet Driver. This may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Recommendations For versions prior to 29.1, update to version 29.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected driver until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-02221

CVE-2024-36274

Affected Products

Intel 800 Series Ethernet Driver

References · 5

• https://bdu.fstec.ru/vul/2025-02221 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36274 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01144.html · Note
• https://twitter.com/cybercronai/status/1890272401260253430 · Twitter Post
• https://twitter.com/CVEnew/status/1890046690012360723 · Twitter Post