6

CVE-2023-22327

Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.

Data is provided by the National Vulnerability Database (NVD)
IntelStratix 10 Gx 10m Fpga Firmware Version < 2.8.1
   IntelStratix 10 Gx 10m Fpga Version-
IntelStratix 10 Gx 400 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Gx 400 Fpga Version-
IntelStratix 10 Gx 650 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Gx 650 Fpga Version-
IntelStratix 10 Gx 850 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Gx 850 Fpga Version-
IntelStratix 10 Sx 400 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Sx 400 Fpga Version-
IntelStratix 10 Sx 650 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Sx 650 Fpga Version-
IntelStratix 10 Sx 850 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Sx 850 Fpga Version-
IntelStratix 10 Tx 400 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Tx 400 Fpga Version-
IntelStratix 10 Tx 850 Fpga Firmware Version < 2.8.1
   IntelStratix 10 Tx 850 Fpga Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.226
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
secure@intel.com 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.