VulnerabilityModified
CVE-2022-38787
Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.
HIGH 7.8EPSS 0.18%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.18%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/agilex 7 fpga f-series 019 firmware · intel/agilex 7 fpga f-series 023 firmware · intel/agilex 7 fpga f-series 006 firmware · intel/agilex 7 fpga f-series 008 firmware · intel/agilex 7 fpga f-series 027 firmware · intel/agilex 7 fpga f-series 014 firmware · intel/agilex 7 fpga f-series 012 firmware · intel/agilex 7 fpga f-series 022 firmware · intel/agilex 7 fpga i-series 022 firmware · intel/agilex 7 fpga i-series 041 firmware · intel/agilex 7 fpga i-series 035 firmware · intel/agilex 7 fpga i-series 027 firmware · intel/agilex 7 fpga i-series 019 firmware · intel/agilex 7 fpga i-series 040 firmware · intel/agilex 7 fpga i-series 023 firmware · intel/agilex 7 fpga m-series 039 firmware · intel/stratix 10 nx 2100 fpga firmware · intel/stratix 10 dx 2800 fpga firmware · intel/stratix 10 dx 2100 fpga firmware · intel/stratix 10 dx 1100 fpga firmware · +28 more
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.