Database/Firmware, BMC & network fabric
Intel Ethernet Adapter manageability firmware (access control): TENANT ISOLATION: improper access control in Intel
Impact
TENANT ISOLATION: improper access control in Intel Ethernet adapter manageability firmware, allowing an authenticated user to escalate privilege. Same NC-SI sideband surface as its sibling — the difference is it needs an account, which in a bare-metal rental means the tenant. A tenant escalating through the manageability engine is a tenant reaching toward the BMC of the machine they rented, and from there toward the operator's management network.
Who can reach it
Authenticated user — on bare metal, the tenant with host access.
What to do
OEM firmware bundle update for adapter manageability firmware plus cold power cycle. Verify NC-SI is actually needed on your platform; where the server has a dedicated BMC NIC, disabling the sideband channel in BIOS/BMC config removes this path entirely and is a config change rather than a flash.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.