Lucene search

K
vulnrichmentIntelVULNRICHMENT:CVE-2024-23908
HistoryAug 14, 2024 - 1:45 p.m.

CVE-2024-23908

2024-08-1413:45:25
CWE-277
intel
github.com
3
cve-2024
insecure permissions
flexlm license daemons
intel(r) fpga software
privilege escalation

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS4

5.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Insecure inherited permissions in some Flexlm License Daemons for Intel® FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Flexlm License Daemons for Intel(R) FPGA software",
    "versions": [
      {
        "status": "affected",
        "version": "before version v11.19.5.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:intel:fpga_add-on:11.19.5.0:*:*:*:*:*:*:*"
    ],
    "vendor": "intel",
    "product": "fpga_add-on",
    "versions": [
      {
        "status": "affected",
        "version": "11.19.5.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS4

5.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-23908