CVE-2023-28376

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-14 · updated 2026-06-17
Weakness: CWE-125

Description

Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Affected products

Intel Ethernet Network Adapter E810-2Cqda2 Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda1 Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda1 For Ocp 3.0 Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda1 For Ocp Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda2 Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda2 For Ocp 3.0 Firmware: before 1.7.1 — fixed in 1.7.1
Intel Ethernet Network Adapter E810-Cqda2T Firmware: before 1.7.1 — fixed in 1.7.1

How to fix

Upgrade to a fixed version: Intel Ethernet Network Adapter E810-2Cqda2 Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda1 Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda1 For Ocp 3.0 Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda1 For Ocp Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda2 Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda2 For Ocp 3.0 Firmware 1.7.1; Intel Ethernet Network Adapter E810-Cqda2T Firmware 1.7.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-28376 or the next vulnerability affects your stack