ID
VAR-202602-4010
CVE
CVE-2025-27535
TITLE
Intel's Intel Ethernet Controller Insufficient access control in IOCTL Disclosure Vulnerability
Trust: 0.8
DESCRIPTION
Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. ioctl There is a problem. Information handled by the software will not be rewritten. In addition, the software may stop functioning completely. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | intel | model: | ethernet controller | scope: | lt | version: | 30.3 | Trust: 1.0 |
| vendor: | インテル | model: | intel ethernet controller | scope: | eq | version: | 30.3 | Trust: 0.8 |
| vendor: | インテル | model: | intel ethernet controller | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | インテル | model: | intel ethernet controller | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-782 | Trust: 1.0 |
| problemtype: | due to poor access control IOCTL the publication of (CWE-782) [ others ] | Trust: 0.8 |
PATCH
| title: | INTEL-SA-01171 | url: | https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01171.html | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-27535 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2026-007689 | Trust: 0.8 |
REFERENCES
| url: | https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01171.html | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-27535 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2026-007689 |
| db: | NVD | id: | CVE-2025-27535 |
LAST UPDATE DATE
2026-03-19T23:18:09.679000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2026-007689 | date: | 2026-03-18T04:29:00 |
| db: | NVD | id: | CVE-2025-27535 | date: | 2026-03-17T15:45:07.677 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2026-007689 | date: | 2026-03-18T00:00:00 |
| db: | NVD | id: | CVE-2025-27535 | date: | 2026-02-10T17:16:14.427 |