{"id":"CVE-2022-36382","aliases":["EUVD-2022-39095","GHSA-3c52-h4x3-2jhm"],"status":"published","title":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810...","description":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00186,"percentile":0.08241,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2023-02-16T20:00:26Z","modified":"2026-06-17T04:53:21Z","products":[{"vendor":"intel","product":"ethernet_controller_x710-am2_firmware"},{"vendor":"intel","product":"ethernet_controller_x710-bm2_firmware"},{"vendor":"intel","product":"ethernet_controller_xl710-am1_firmware"},{"vendor":"intel","product":"ethernet_controller_xl710-am2_firmware"},{"vendor":"intel","product":"ethernet_controller_xl710-bm1_firmware"},{"vendor":"intel","product":"ethernet_controller_xl710-bm2_firmware"},{"vendor":"intel","product":"ethernet_controller_xxv710-am1_firmware"},{"vendor":"intel","product":"ethernet_controller_xxv710-am2_firmware"},{"vendor":"intel","product":"ethernet_converged_network_adapter_x710-da2_firmware"},{"vendor":"intel","product":"ethernet_converged_network_adapter_x710-da4_firmware"},{"vendor":"intel","product":"ethernet_converged_network_adapter_xl710-da1_firmware"},{"vendor":"intel","product":"ethernet_converged_network_adapter_xl710-da2_firmware"},{"vendor":"intel","product":"ethernet_network_controller_e810-cam1_firmware"},{"vendor":"intel","product":"ethernet_network_controller_e810-cam2_firmware"},{"vendor":"intel","product":"ethernet_network_controller_e810-xxvam2_firmware"}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36382"},{"url":"https://github.com/advisories/GHSA-3c52-h4x3-2jhm"}],"sources":{"cve":[{"id":"CVE-2022-36382","description":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.","status":"published","published":"2023-02-16T20:00:26.578Z","modified":"2025-01-27T18:13:41.505Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:35.945659Z"}],"euvd":[{"id":"EUVD-2022-39095","description":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.","status":"published","published":"2023-02-16T20:00:26Z","modified":"2025-01-27T18:13:41Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:12.238707Z"}],"ghsa":[{"id":"GHSA-3c52-h4x3-2jhm","title":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810...","description":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.","status":"published","published":"2023-02-16T21:30:25Z","modified":"2023-03-15T05:07:01Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:20.892008Z"}],"nvd":[{"id":"CVE-2022-36382","description":"Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.","status":"published","published":"2023-02-16T21:15:13.353Z","modified":"2026-06-17T04:53:21.793Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}