1. Home
  2. CVE Database
  3. CVE-2022-36382
MEDIUM · 6.0

CVE-2022-36382

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before ver...

Vulnerability Description

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

CVSS Score

6.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelEthernet Network Controller E810-Cam1 Firmware< 1.7.0.8
IntelEthernet Network Controller E810-Cam1-
IntelEthernet Network Controller E810-Cam2 Firmware< 1.7.0.8
IntelEthernet Network Controller E810-Cam2-
IntelEthernet Network Controller E810-Xxvam2 Firmware< 1.7.0.8
IntelEthernet Network Controller E810-Xxvam2-
IntelEthernet Controller X710-Am2 Firmware< 9.101
IntelEthernet Controller X710-Am2-
IntelEthernet Controller X710-Bm2 Firmware< 9.101
IntelEthernet Controller X710-Bm2-
IntelEthernet Controller Xl710-Am1 Firmware< 9.101
IntelEthernet Controller Xl710-Am1-
IntelEthernet Controller Xl710-Am2 Firmware< 9.101
IntelEthernet Controller Xl710-Am2-
IntelEthernet Controller Xl710-Bm1 Firmware< 9.101
IntelEthernet Controller Xl710-Bm1-
IntelEthernet Controller Xl710-Bm2 Firmware< 9.101
IntelEthernet Controller Xl710-Bm2-
IntelEthernet Controller Xxv710-Am1 Firmware< 9.101
IntelEthernet Controller Xxv710-Am1-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2022-36382?

CVE-2022-36382 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before ver...

How severe is CVE-2022-36382?

CVE-2022-36382 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-36382?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Ethernet Network Controller E810-Cam1 Firmware, Intel Ethernet Network Controller E810-Cam1, Intel Ethernet Network Controller E810-Cam2 Firmware, Intel Ethernet Network Controller E810-Cam2, Intel Ethernet Network Controller E810-Xxvam2 Firmware.