What’s Vulnerable › Vulnerabilities

CVE-2022-36382

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-16 · updated 2026-06-17
• Weakness: CWE-787

Description

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

Affected products

• Intel Ethernet Controller X710-Am2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller X710-Bm2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xl710-Am1 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xl710-Am2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xl710-Bm1 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xl710-Bm2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xxv710-Am1 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Controller Xxv710-Am2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Converged Network Adapter X710-Da2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Converged Network Adapter X710-Da4 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Converged Network Adapter Xl710-Da1 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Converged Network Adapter Xl710-Da2 Firmware: before 9.101 — fixed in 9.101
• Intel Ethernet Network Controller E810-Cam1 Firmware: before 1.7.0.8 — fixed in 1.7.0.8
• Intel Ethernet Network Controller E810-Cam2 Firmware: before 1.7.0.8 — fixed in 1.7.0.8
• Intel Ethernet Network Controller E810-Xxvam2 Firmware: before 1.7.0.8 — fixed in 1.7.0.8

How to fix

Upgrade to a fixed version: Intel Ethernet Controller X710-Am2 Firmware 9.101; Intel Ethernet Controller X710-Bm2 Firmware 9.101; Intel Ethernet Controller Xl710-Am1 Firmware 9.101; Intel Ethernet Controller Xl710-Am2 Firmware 9.101; Intel Ethernet Controller Xl710-Bm1 Firmware 9.101; Intel Ethernet Controller Xl710-Bm2 Firmware 9.101; Intel Ethernet Controller Xxv710-Am1 Firmware 9.101; Intel Ethernet Controller Xxv710-Am2 Firmware 9.101; Intel Ethernet Converged Network Adapter X710-Da2 Firmware 9.101; Intel Ethernet Converged Network Adapter X710-Da4 Firmware 9.101; Intel Ethernet Converged Network Adapter Xl710-Da1 Firmware 9.101; Intel Ethernet Converged Network Adapter Xl710-Da2 Firmware 9.101. Check the vendor advisory for mitigations.

References

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html
• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html

Get alerted when CVE-2022-36382 or the next vulnerability affects your stack