{"id":"CVE-2024-23499","state":"PUBLISHED","title":"Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated us","description":"Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access.","publishedAt":"2024-08-14T13:45:46.816Z","updatedAt":"2024-08-29T17:42:51.221Z","severity":{"score":7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Ethernet Network Controllers and Adapters E810 Series"],"affected":[{"vendor":"n/a","product":"Intel(R) Ethernet Network Controllers and Adapters E810 Series","defaultStatus":"unaffected","versions":[{"version":"before version 28.3","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html"],"weaknesses":["CWE-693"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23499.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23499","state":"PUBLISHED","datePublished":"2024-08-14T13:45:46.816Z","dateUpdated":"2024-08-29T17:42:51.221Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2024-02-28T04:00:21.205Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Ethernet Network Controllers and Adapters E810 Series","defaultStatus":"unaffected","versions":[{"version":"before version 28.3","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"cvssV4_0":{"version":"4.0","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"},{"cweId":"CWE-693","lang":"en","description":"Protection mechanism failure","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2024-08-14T13:45:46.816Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"intel","product":"ethernet_network_controller_e810","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"28.3","versionType":"custom"}],"cpes":["cpe:2.3:h:intel:ethernet_network_controller_e810:-:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-19T18:37:55.046954Z","id":"CVE-2024-23499","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-29T17:42:51.221Z"}}]}}}