CVE-2022-21203

CWE-2813 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 88.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Quartus Prime
Timeline
PublishedFeb 9
Latest updateFeb 11

Description

Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel(r)_quartus(r)_prime_standard_editionbefore version 21.1

🔴Vulnerability Details

2
GHSA
GHSA-9ffv-qjrg-84gf: Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21↗2022-02-11
▶
CVEList
CVE-2022-21203: Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21↗2022-02-09
▶
CVE-2022-21203 (HIGH CVSS 7.8) | Improper permissions in the SafeNet | cvebase.io