What is the CVSS score of CVE-2016-8106?

CVE-2016-8106 has a CVSS 3.0 base score of 5.9 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 2.6%.

Is there a patch available for CVE-2016-8106?

Yes, a patch is available for CVE-2016-8106. Update the affected software to the latest version immediately.

Ethernet Controller X710 Firmware CVE-2016-8106

MEDIUM

Improper Input Validation (CWE-20)

2017-01-09 secure@intel.com

Intel Denial Of Service Ethernet Controller X710 Firmware Ethernet Controller Xl710 Firmware Ethernet 10Gb 2 Port 562Flr Sfp Ethernet 10Gb 2 Port 562Sfp Ethernet 10Gb 4 Port 563Sfp Proliant Xl260A G9 Server Converged Hx Series Converged Hx5500 Appliance Converged Hx5510 Appliance Converged Hx7500 Appliance Converged Hx7510 Appliance Nextscale Nx360 M5 System X3250 M5 System X3500 M5 System X3550 M5 System X3650 M5 System X3750 M4 System X3850 X6 System X3950 X6 Thinkagile Cx2200 Thinkagile Cx4200 Thinkagile Cx4600 Thinkserver Rd350 Thinkserver Rd450 Thinkserver Rd550 Thinkserver Rd650 Thinkserver Sd350 Thinkserver Td350

5.9

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jan 09, 2017 - 21:59 cve.org

MEDIUM 5.9

DescriptionCVE.org

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions. Affected products include: Intel Ethernet Controller X710 Firmware, Intel Ethernet Controller Xl710 Firmware, Hp Ethernet 10Gb 2-Port 562Flr-Sfp\+, Hp Ethernet 10Gb 2-Port 562Sfp\+, Hp Ethernet 10Gb 4-Port 563Sfp\+. Version information: version 5.05.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.