Intel E810 Ethernet Controller firmware: Out-of-bounds read in E810 firmware reachable from an adjacent

Impact

Out-of-bounds read in E810 firmware reachable from an adjacent, unauthenticated attacker, causing denial of service. Adjacent means the same L2 segment — in a leaf/spine cluster that is every other node in the rack, including other tenants' nodes if you share a VLAN. One compromised tenant machine can walk the rack knocking NICs offline.

Who can reach it

Unauthenticated, adjacent — a host on the same layer-2 segment as the target NIC.

What to do

Flash E810 firmware to 1.7.1 or later. Cold power cycle required for the NVM image to activate; plan a per-node drain. If you cannot patch immediately, keeping tenants on separate VLANs limits who is 'adjacent' — a switch config change that meaningfully shrinks the exposed set.

References