What’s Vulnerable › Vulnerabilities

CVE-2021-33126

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-18 · updated 2026-06-17

Description

Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.

Affected products

• Intel Ethernet Controller V710 Firmware: before 8.5 — fixed in 8.5
• Intel Ethernet Controller X710 Firmware: before 8.5 — fixed in 8.5
• Intel Ethernet Controller Xl710 Firmware: before 8.5 — fixed in 8.5
• Intel Ethernet Controller Xxv710 Firmware: before 8.5 — fixed in 8.5
• Intel Ethernet Network Adapter X722Da2 Firmware: before 1.5.5 — fixed in 1.5.5
• Intel Ethernet Network Adapter X722Da4Fh Firmware: before 1.5.5 — fixed in 1.5.5
• Intel Ethernet Network Adapter X722Da4G1P5 Firmware: before 1.5.5 — fixed in 1.5.5

How to fix

Upgrade to a fixed version: Intel Ethernet Controller V710 Firmware 8.5; Intel Ethernet Controller X710 Firmware 8.5; Intel Ethernet Controller Xl710 Firmware 8.5; Intel Ethernet Controller Xxv710 Firmware 8.5; Intel Ethernet Network Adapter X722Da2 Firmware 1.5.5; Intel Ethernet Network Adapter X722Da4Fh Firmware 1.5.5; Intel Ethernet Network Adapter X722Da4G1P5 Firmware 1.5.5. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html

Get alerted when CVE-2021-33126 or the next vulnerability affects your stack