CVE-2023-24478 MEDIUM

CVE-2023-24478

Vendor N/A
Product Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux
Weakness CWE-330 · Insufficient randomness
Published August 15, 2023
Last update October 1, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.

Key dates

02Disclosure timeline

August 15, 2023 CVE published
October 1, 2024 Record updated