Escalation of Privilege in Intel Quartus Prime Software
CVE-2022-26840

7.3HIGH

Key Information:

Vendor
Intel
Vendor
CVE Published:
16 February 2023

Summary

The Intel Quartus Prime software, encompassing both Pro and Standard editions, contains an improper neutralization vulnerability that could be exploited by an authenticated user. This flaw allows for potential escalation of privilege through local access, enabling unauthorized actions within the software environment.

Affected Version(s)

Intel(R) Quartus Prime Pro and Standard edition software See references

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.