CVE-2021-0200: intel ethernet_controller_v710-at2_firmware Out-of-bounds Write
Vulnerability summary
CVE-2021-0200 is a medium (CVSS 6.7) Out-of-bounds Write vulnerability in intel ethernet_controller_v710-at2_firmware. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 16.5% of scored vulnerabilities.
Not severe (CVSS 6.7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 17-11-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.25% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
1 vendor · 11 products
References
2 links- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.htmlX Refsource MISCVendor Advisory