CVE-2023-49614 MEDIUM

CVE-2023-49614

Vendor N/A
Product Intel(R) FPGA products
Weakness CWE-787
Published May 16, 2024
Last update August 15, 2024

CVSS base score

5.7/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure.

Key dates

02Disclosure timeline

May 16, 2024 CVE published
August 15, 2024 Record updated