fkie_cve-2024-23909
Vulnerability from fkie_nvd
Published
2024-08-14 14:15
Modified
2024-09-06 20:33
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:pro:*:*:*",
"matchCriteriaId": "31BFC77B-63EF-4A98-BC60-159CED8B08E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:standard:*:*:*",
"matchCriteriaId": "ECB72360-F39C-4E01-B63E-24AFAA3FBBCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:pro:*:*:*",
"matchCriteriaId": "276AAB67-9B1F-44EA-AD30-EFEA3ACE9436",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:standard:*:*:*",
"matchCriteriaId": "7BAB04E2-90A5-4EDE-BBDE-B1F96E2B4FB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "CB9F6105-B0B9-48EF-9B48-728B48DE4E78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "3E7E25DD-47F2-4754-9EA4-880C481EBC36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "604E6194-5C3B-4B11-9E84-030EBFE3C33D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "C9417D4C-883D-4828-AAB1-AC003D7A7DEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "4A40D4F0-0C25-4AB0-A56B-2BF23FEB52FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "59AB3FF5-8CF6-4EC0-B09F-C6253CECB440",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "5443B45A-313C-4C97-9FAF-4FBC5D893B09",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "0D8A4D04-3AE1-41BE-9596-3A29EAF3AF5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "992EBFA9-A583-4CE8-BB5E-60BFFC0C6760",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "22FC2247-2E6B-4203-9D13-9A8C614E579F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "AA4530CE-D098-4400-BFE2-2D30011F5020",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "77DD87B7-12EA-4A19-9510-0C452ACC9F33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "09C209A6-BF65-444C-A840-FB93FA2F8185",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "F8651853-2A7F-4955-8CCF-688171C5321F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "BEDCD55A-17A5-49A2-9E71-3BD1E0FF65E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "D228509F-F82F-4CA4-8643-D9F4694CB740",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "1E61AF90-76BC-46FD-A32C-62C4D17EA277",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "6FB570E8-3E1B-42E4-A9DA-FC43F48578DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "826D188C-352E-402A-8069-0A717BB53B96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "B8E2CE09-80E4-4730-9CA8-09A70E2ACD06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "FDC51D37-FB6B-497E-B6BC-61BE90357449",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "07B861CD-0090-47FE-B4CD-D89D70CFD3DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "07537F69-D4F4-4648-BD1F-9468A5078A6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "DB8DC11C-72CD-42CC-9945-23F040498F19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2:*:*:*:pro:*:*:*",
"matchCriteriaId": "B2F1954B-D4BA-463D-971E-24088345987A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3:*:*:*:pro:*:*:*",
"matchCriteriaId": "F65A15C1-AACA-4081-96E8-8BBD354F75DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4:*:*:*:pro:*:*:*",
"matchCriteriaId": "02C01340-C6DE-4BB1-8AEA-0B277EA9EDDA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."
},
{
"lang": "es",
"value": " La ruta de b\u00fasqueda no controlada en algunas tecnolog\u00edas de software Intel(R) FPGA SDK para OpenCL(TM) puede permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a trav\u00e9s del acceso local."
}
],
"id": "CVE-2024-23909",
"lastModified": "2024-09-06T20:33:05.670",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9,
"source": "secure@intel.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "secure@intel.com",
"type": "Secondary"
}
]
},
"published": "2024-08-14T14:15:20.447",
"references": [
{
"source": "secure@intel.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html"
}
],
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-427"
}
],
"source": "secure@intel.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-427"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…