Out-of-bounds read in Intel Ethernet Adapters 800 Series Controllers and associated…
Priority LOW 29CWE-125Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.
Summary
Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Why it matters now
EPSS 0.00386 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters | before version 1.5.3.0 | — | No fix listed | CNA |
- Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters Vendor— Affected before version 1.5.3.0 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-0009
- 2026-10-03 Alias added: GHSA-qf6f-9fq8-x522
References
More Intel Ethernet Controller E810 Firmware vulnerabilities
- TI-2021-00041 Improper input validation in Intel Ethernet Controllers X722 and 800 series Linux RMDA… CVSS 3.1HIGH 7.8
- TI-2021-00002 Improper check for unusual conditions in Intel Ethernet Controllers 800 series Linux… CVSS 3.1HIGH 7.1
- TI-2021-00003 Improper handling of exceptional conditions in Intel Ethernet Controllers 800 series… CVSS 3.1MEDIUM 5.5
- TI-2022-11351 Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers… CVSS 3.1MEDIUM 4.4
- TI-2021-12705 Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers… CVSS 3.1MEDIUM 4.4
- TI-2021-00008 Uncontrolled resource consumption in Intel Ethernet Adapters 800 Series Controllers and… CVSS 3.1MEDIUM 4.4
Sources
- CVE-2021-0009 · CVE Program
- CVE-2021-0009 · NVD
- FIRST EPSS
- GHSA-qf6f-9fq8-x522 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences