Intel FPGA SDK for OpenCL Improper AC Escalation <22.1
CVE-2022-34157 Published on February 16, 2023

Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local access.

NVD

Vulnerability Analysis

CVE-2022-34157 can be exploited with local system access, requires user interaction and a small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Products Associated with CVE-2022-34157

stack.watch emails you whenever new vulnerabilities are published in Intel Quartus Prime or Intel Fpga Software Development Kit. Just hit a watch button to start following.

Intel Quartus Prime
 
Intel Fpga Software Development Kit
 

Exploit Probability

EPSS
0.14%
Percentile
33.20%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.