CVE-2023-24478

Published Aug 15, 2023

Last updated a year ago

CVSS medium 5.5

Overview

Description: Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.
Source: secure@intel.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-330
secure@intel.com: CWE-330

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:intel:quartus_prime:*:*:*:*:pro:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC907F1A-35E9-4FCD-8748-240E83EB4900",
            "versionEndExcluding": "22.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References