Insufficient Control Flow Management in Intel Quartus Prime Software
CVE-2022-33902

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Quartus Prime Pro And Standard Edition Software
Vendor
CVE Published:
16 February 2023

What is CVE-2022-33902?

Insufficient control flow management in the Intel Quartus Prime Pro and Standard Edition software can potentially allow an authenticated user to escalate privileges through local access. This vulnerability raises significant security concerns, enabling unauthorized actions within the software environment. Users of the affected versions are advised to remain vigilant and implement necessary security measures.

Affected Version(s)

Intel(R) Quartus Prime Pro and Standard edition software See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.