#VU73164 Improper access control in Intel products - CVE-2022-34157
Published: March 8, 2023
Vulnerability identifier: #VU73164
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-34157
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Intel Quartus Prime Pro
Intel Quartus Prime Standard
Intel FPGA SDK for OpenCL Pro Edition
Intel Quartus Prime Pro
Intel Quartus Prime Standard
Intel FPGA SDK for OpenCL Pro Edition
Software vendor:
Intel
Intel
Description
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.
Remediation
Install updates from vendor's website.