Improper access control in Intel products - CVE-2022-34157
Published: March 8, 2023
Vulnerability identifier: #VU73164
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-34157
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Intel
Affected software:
Intel Quartus Prime Pro
Intel Quartus Prime Standard
Intel FPGA SDK for OpenCL Pro Edition
Intel Quartus Prime Pro
Intel Quartus Prime Standard
Intel FPGA SDK for OpenCL Pro Edition
Detailed vulnerability description
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.
How to mitigate CVE-2022-34157
Install updates from vendor's website.