Improper access control in Intel products - CVE-2022-34157
Published: March 8, 2023
Vulnerability identifier: #VU73164
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-34157
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.
Affected software
Intel Quartus Prime Standard
Intel Quartus Prime Pro
Intel FPGA SDK for OpenCL Pro Edition
Intel Quartus Prime Pro
Intel FPGA SDK for OpenCL Pro Edition
How to mitigate CVE-2022-34157
Install updates from vendor's website.
Intel Quartus Prime Standard - update to 21.1
Intel Quartus Prime Pro - update to 21.3
Intel FPGA SDK for OpenCL Pro Edition - update to 22.1
Intel Quartus Prime Pro - update to 21.3
Intel FPGA SDK for OpenCL Pro Edition - update to 22.1