Lucene search

[email protected]CVE-2022-38787

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2022-38787

2023-05-1014:15:14

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-38787

intel

fpga

firmware

input validation

privilege escalation

local access

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Improper input validation in firmware for some Intel® FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Vulners

NVD

Node

intelmax_10_fpgaRange<2.7.0

CPENameOperatorVersion
intel:agilex_7_fpga_f-series_019_firmwareintel agilex 7 fpga f-series 019 firmwarele2.7.0

CPE	Name	Operator	Version
intel:agilex_7_fpga_f-series_019_firmware	intel agilex 7 fpga f-series 019 firmware	le	2.7.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) FPGA products",
    "versions": [
      {
        "version": "before version 2.7.0 Hotfix",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00824.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-38787

prion1 intel1 cvelist1 nvd1