Intel Ethernet E810 Series and Ethernet 700 Series firmware: Out-of-bounds write in firmware across both the E810 line

Impact

Out-of-bounds write in firmware across both the E810 line and the older 700 Series (X710/XL710/XXV710), triggerable by a privileged host user. Notable because it spans two adapter generations — if you have a mixed fleet, the version target differs per family (E810 before 1.7.0.8, 700 Series before 9.101) and a single blanket firmware policy will miss half of it.

Who can reach it

Privileged local user on the host.

What to do

Flash E810 to 1.7.0.8+ and 700-Series adapters to 9.101+. Cold power cycle on both. Because the two families need different images, build the NVM update into your provisioning pipeline keyed on device ID rather than doing it by hand.

References