ID
VAR-202602-0957
CVE
CVE-2025-27243
TITLE
Intel's Intel Ethernet Controller Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Information handled by the software will not be rewritten. In addition, the software may stop functioning completely. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | intel | model: | ethernet controller | scope: | lt | version: | 30.3 | Trust: 1.0 |
| vendor: | インテル | model: | intel ethernet controller | scope: | eq | version: | 30.3 | Trust: 0.8 |
| vendor: | インテル | model: | intel ethernet controller | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | インテル | model: | intel ethernet controller | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [ others ] | Trust: 0.8 |
PATCH
| title: | INTEL-SA-01171 | url: | https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01171.html | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-27243 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2026-007690 | Trust: 0.8 |
REFERENCES
| url: | https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01171.html | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-27243 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2026-007690 |
| db: | NVD | id: | CVE-2025-27243 |
LAST UPDATE DATE
2026-03-19T23:44:03.125000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2026-007690 | date: | 2026-03-18T04:29:00 |
| db: | NVD | id: | CVE-2025-27243 | date: | 2026-03-17T15:44:31.833 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2026-007690 | date: | 2026-03-18T00:00:00 |
| db: | NVD | id: | CVE-2025-27243 | date: | 2026-02-10T17:16:14.183 |