A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker t
A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
Noroxi analysis
No Noroxi analysis for this record yet
We don't hand-write analysis for the hundreds of thousands of vulnerabilities in the database; that wouldn't be honest. For notable, high-impact vulnerabilities our team writes the mechanism, detection and remediation steps.
We use this product, ask for help- Published
- Jan 9, 2017
- Updated
- Jun 16, 2026
- EPSS
- 5.1% · 92th percentile
- CWE
- CWE-20
Sign in to follow · You’ll be notified if a followed record enters KEV, gets an exploit or is updated.
Report tools
Action score
25
Monitor
Low priority for now.
- CVSS
- 23 / 40 · 5.9 / 10
- CISA KEV
- 0 / 30 · Not listed
- EPSS
- 2 / 30 · 5.1%
Affected systems
| Vendor | Product | CPE |
|---|---|---|
| intel | ethernet controller x710 firmware | cpe:2.3:o:intel:ethernet_controller_x710_firmware |
| intel | ethernet controller x710-am2 sr1zp | cpe:2.3:h:intel:ethernet_controller_x710-am2_sr1zp |
| intel | ethernet controller x710-am2 sr1zq | cpe:2.3:h:intel:ethernet_controller_x710-am2_sr1zq |
| intel | ethernet controller x710-bm2 sllkb | cpe:2.3:h:intel:ethernet_controller_x710-bm2_sllkb |
| intel | ethernet controller x710-bm2 sllkc | cpe:2.3:h:intel:ethernet_controller_x710-bm2_sllkc |
| intel | ethernet controller xl710-am1 sr1zm | cpe:2.3:h:intel:ethernet_controller_xl710-am1_sr1zm |
| intel | ethernet controller xl710-am1 sr1zn | cpe:2.3:h:intel:ethernet_controller_xl710-am1_sr1zn |
| intel | ethernet controller xl710-am2 sr1zk | cpe:2.3:h:intel:ethernet_controller_xl710-am2_sr1zk |
| intel | ethernet controller xl710-am2 sr1zl | cpe:2.3:h:intel:ethernet_controller_xl710-am2_sr1zl |
| intel | ethernet controller xl710-bm1 sllk9 | cpe:2.3:h:intel:ethernet_controller_xl710-bm1_sllk9 |
| intel | ethernet controller xl710-bm1 sllka | cpe:2.3:h:intel:ethernet_controller_xl710-bm1_sllka |
| intel | ethernet controller xl710-bm2 sllk7 | cpe:2.3:h:intel:ethernet_controller_xl710-bm2_sllk7 |
and 48 more
Affected versions
NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.
- hp ethernet 10gb 2-port 562flr-sfp+all versions
- hp ethernet 10gb 2-port 562sfp+all versions
- hp ethernet 10gb 4-port 563sfp+all versions
- hp proliant xl260a g9 serverall versions
- intel ethernet controller x710 firmwareup to 5.04 inclusive
- intel ethernet controller xl710 firmwareup to 5.04 inclusive
- lenovo converged hx series5.05
- lenovo converged hx5500 appliance5.05
- lenovo converged hx5510 appliance5.05
- lenovo converged hx7500 appliance5.05
- lenovo converged hx7510 appliance5.05
- lenovo nextscale nx360 m55.05
- lenovo system x3250 m55.05
- lenovo system x3500 m55.05
- lenovo system x3550 m55.05
- lenovo system x3650 m55.05
- lenovo system x3750 m45.05
- lenovo system x3850 x65.05
- lenovo system x3950 x65.05
- lenovo thinkagile cx22005.05
Versions reported by the vendor
Affected version ranges reported by the assigning authority (intel). Independent of NVD's CPE analysis and usually ahead of it.
Intel Intel® Ethernet Controller X710 family and Intel® Ethernet Controller XL710 family
- Before NVM Version 5.05affected
Remediation
Which version to upgrade to
Fix versions compiled from the vendor, package registries and Microsoft. Verify the vendor's note before upgrading.
No fix version is recorded for this entry. Check the references for vendor advisories.
Exploit status
No known public exploit
No public exploit has been observed yet. That doesn't mean you're safe, only that the bar is a little higher.
Research context
For pentesters and researchers: attack profile, score disagreement, timeline, patch commits, credits, variant and chain candidates, bug bounty scope. All derived from existing data; no exploit code.
Timeline
From publication to today: proof of concept, Metasploit module, CISA KEV and fix record. Dates are as reported by the sources.
No dated events beyond publication.
FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).
Patch and commit links
Commit, PR and diff links among the references. A starting point for patch-diffing and variant hunting; fixes, not exploits.
No commit or PR link among the references.
Credits
All researchersFinders, reporters and analysts named in the CNA record. Click a name for that researcher’s other records.
No credits in the CNA record.
Variant candidates
Same product, same weakness class, within 18 months. If the patch missed the root cause, the sibling bug is here.
No nightly-computed relations.
Chain candidates
An authentication bypass and a privilege-requiring bug in the same product, published close together: combined they may become an unauthenticated path.
—
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
Technical details
Attack conditions
- Anyone who can reach it over the internet can trigger it.
- No account or password is required.
- No user action is required.
- Special conditions such as timing or configuration are required.
If successful
- Confidentiality
- none
- Integrity
- none
- Availability
- high · the service can be disrupted
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality impact
- None
- Integrity impact
- None
- Availability impact
- High
Weakness class (CWE)
CWE-20 · Improper Input ValidationCVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd-primary
Attack context
MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.
Attack patterns (CAPEC)
- Buffer Overflow via Environment VariablesCAPEC-10likelihood: High · High
- Server Side Include (SSI) InjectionCAPEC-101likelihood: High · High
- Cross Zone ScriptingCAPEC-104likelihood: Medium · High
- Command Line Execution through SQL InjectionCAPEC-108likelihood: Low · Very High
- Object Relational Mapping InjectionCAPEC-109likelihood: Low · High
- SQL Injection through SOAP Parameter TamperingCAPEC-110likelihood: High · Very High
- Double EncodingCAPEC-120likelihood: Low · Medium
- Subverting Environment Variable ValuesCAPEC-13likelihood: High · Very High
ATT&CK techniques
- Obfuscated Files or InformationT1027
- Masquerading: Invalid Code SignatureT1036.001
- Steal Web Session CookieT1539
- Subvert Trust Controls: Code SigningT1553.002
- Impair Defenses:Impair Command History LoggingT1562.003
- Hijack Execution Flow:Dynamic Linker HijackingT1574.006
- Hijack Execution Flow:Path Interception by PATH Environment VariableT1574.007
Change log
No changes recorded on tracked fields yet. Score, KEV, exploit maturity and fix status changes appear here.
References
- www-01.ibm.com/support/docview.wss?uid=swg22002507
- www.securityfocus.com/bid/95333
- www.securitytracker.com/id/1037562
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05368378
- security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00063&languageid=en-fr
- security.netapp.com/advisory/ntap-20190731-0001/
- support.lenovo.com/us/en/product_security/LEN-12029
Vendor advisories and official records. Exploit/PoC links are deliberately left out.