Vulnerability CVE-2016-8106
Published: 2017-01-09   Modified: 2017-01-10

Description:
A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Lenovo -> System x3750 m4 
Lenovo -> Thinkserver rd650 
Lenovo -> Nextscale nx360 m5 
Lenovo -> System x3950 x6 
Lenovo -> Thinkserver rd450 
Lenovo -> Converged hx5510 appliance 
Lenovo -> Thinkserver rd350 
Lenovo -> System x3250 m5 
Lenovo -> Thinkserver rd550 
Lenovo -> System x3500 m5 
Lenovo -> Converged hx5500 appliance 
Lenovo -> Thinkserver td350 
Lenovo -> Converged hx7510 appliance 
Lenovo -> System x3650 m5 
Lenovo -> Converged hx series 
Lenovo -> Converged hx7500 appliance 
Lenovo -> System x3850 x6 
Lenovo -> Thinkagile cx4600 
Lenovo -> Thinkagile cx2200 
Lenovo -> Thinkserver sd350 
Lenovo -> Thinkagile cx4200 
Lenovo -> System x3550 m5 
Intel -> Ethernet controler xl710 firmware 
Intel -> Ethernet controler x710 firmware 
Intel -> Ethernet controller xl710 firmware 
Intel -> Ethernet controller x710 firmware 
HP -> Ethernet 10gb 2-port 562sfp+ 
HP -> Ethernet 10gb 2-port 562flr-sfp+ 
HP -> Ethernet 10gb 4-port 563sfp+ 
HP -> Proliant xl260a g9 server 

 References:
http://www-01.ibm.com/support/docview.wss?uid=swg22002507
http://www.securityfocus.com/bid/95333
http://www.securitytracker.com/id/1037562
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05368378
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00063&languageid=en-fr
https://support.lenovo.com/us/en/product_security/LEN-12029
Copyright 2024, cxsecurity.com

 

Back to Top