Out-of-Bounds Write Vulnerability in Intel FPGA Products
CVE-2023-22327

6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Fpga Products
Vendor
CVE Published:
14 November 2023

What is CVE-2023-22327?

The vulnerability involves an out-of-bounds write in the firmware of certain Intel FPGA products before version 2.8.1. This flaw may be exploited by a privileged user, potentially leading to unauthorized information disclosure through local access. It is essential for users to update their firmware to protect against this vulnerability.

Affected Version(s)

Intel(R) FPGA products before version 2.8.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.