PT-2022-18317 · Intel · Quartus Prime Standard+1

Published 2022-11-11 · Updated 2023-02-07 · CVE-2022-27233

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Quartus Prime Pro and Standard edition software (affected versions not specified)

Description The issue concerns XML injection in the Quartus(R) Prime Programmer, which may allow an unauthenticated user to potentially enable information disclosure via network access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2022-27233

Affected Products

Quartus Prime Pro

Quartus Prime Standard

References · 3

• https://osv.dev/vulnerability/CVE-2022-27233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27233 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html · Vendor Advisory