← Vulnerability feed

Vulnerability record · CVE-2021-33126 · published 18 August 2022

CVE-2021-33126: Intel ethernet controller xxv710 firmware vulnerability

Intel · Ethernet Controller Xxv710 Firmware

Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.

4.4 CVSS 3.1 Medium EPSS 0.20% · top 91.3%
4.4CVSS 3.1 base score
0.20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html PatchVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html PatchVendor Advisory

Track CVE-2021-33126 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.9CVE-2016-8106Intel ethernet controller x710 firmware improper input validation vulnerabilityA Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop th…EPSS 5.1%

Source: NIST National Vulnerability Database (record CVE-2021-33126), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.