GPU VulnDB

Database/Firmware, BMC & network fabric

Intel E810 Ethernet Controller firmware: Buffer overflow in early E810 firmware, triggerable by an unauthenticated

CVE-2020-24501Firmware, BMC & network fabriccurated

Impact

Buffer overflow in early E810 firmware, triggerable by an unauthenticated adjacent attacker for denial of service. Worth carrying in an operator database because E810 cards that shipped in 2020-2021 server generations and were never NVM-updated are still in production fleets — NIC firmware is the layer operators most reliably forget to patch.

Who can reach it

Unauthenticated, adjacent — same L2 segment.

What to do

Flash E810 firmware to 1.4.1.13 or later. Cold power cycle. Practically: audit your fleet's NVM versions first (ethtool -i reports the firmware-version string) — most operators discover a wide spread of versions and should batch the whole update rather than chase individual CVEs.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.