Intel Ethernet 700 Series Controller firmware (X710/XL710/XXV710): Buffer overflow in the adapter firmware of Intel's

CVSS 8.8CVE-2019-0140Firmware, BMC & network fabricINTEL-SA-00255curated

Impact

Buffer overflow in the adapter firmware of Intel's 700-series NICs allowing an *unauthenticated* user to escalate privilege. This is the rare NIC-firmware bug where the published impact is escalation rather than denial of service, and it needs no host account — the attack surface is the network the card is plugged into. A compromised NIC sits below the OS, persists across reinstall, and on many server designs carries the NC-SI sideband to the BMC, so the blast radius extends past the host it lives in.

Who can reach it

Unauthenticated attacker able to reach the adapter over the network. X710/XL710/XXV710 are the standard 10/25/40GbE management and storage NICs in the server generations that host GPUs.

What to do

Flash 700-series NVM firmware to 7.0 or later via Intel's NVM Update Utility or the OEM firmware bundle. Requires a **cold power cycle** to activate, so it is a per-node drain across the fleet. Audit installed NVM versions first (ethtool -i) — 700-series cards are old enough that many fleets have never updated them.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-0140

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.