226 matches found
K20031768: Intel hardware vulnerabilities CVE-2020-8737 CVE-2020-12312
Security Advisory Description CVE-2020-8737 Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure v...
Rockwell Automation Stratix Devices Containing Cisco IOS
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Stratix Devices Vulnerabilities: Incorrect Authorization, Improper Input Validation, Improper Check for Unusual or Exceptional Conditions, Interpretation Conflict, OS...
CISA Releases Four Industrial Control Systems Advisories
CISA has released four 4 Industrial Control Systems ICS advisories on October 27, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for...
ICSA-21-110-02_Rockwell Automation Stratix Switches
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/ Low attack complexity Vendor: Rockwell Automation Equipment: Stratix Switches Vulnerabilities: Insufficiently Protected Credentials, Insufficient Verification of Data Authenticity, Use of Out-of-Range Pointer Offset, Insertion of...
The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to disclose protected information or gain increased privileges.
The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or enhance their...
The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to gain increased privileges.
The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
Intel Quartus Prime Pro Buffer Overflow Vulnerability
Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A buffer overflow vulnerability exists in IntelR StratixR 10 FPGA firmware provided IntelR QuartusR Prime Pro softwar...
CVE-2020-8737
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
CVE-2020-12312
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2020-12312
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Buffer overflow
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Buffer overflow
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
CVE-2020-12312
Summary: CVE-2020-12312 (and related CVE-2020-8737) affect Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro, before version 20.2. What is vulnerable: Intel Stratix 10 FPGA firmware/internal buffers in the Quartus Prime Pro software; improper buffer restrictions allow an unauthe...
CVE-2020-12312
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2020-8737
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
CVE-2020-8737
The CVE-2020-8737 issue affects Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro before version 20.1. The root cause is improper buffer restrictions, allowing an unauthenticated attacker with physical access to potentially escalate privileges and/or cause information disclosure...
CVE-2020-12312: Undefined Security Weakness
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2020-8737: Undefined Security Weakness
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
Intel® Stratix® 10 FPGA SDM for Intel® Quartus® Prime Pro Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00388.html...
Rockwell Automation Allen-Bradley Stratix 5950
1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley Stratix 5950 Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write a...