Vulnerability CVE-2022-21205

Vulnerability CVE-2022-21205

Published: 2022-02-09 Modified: 2022-02-10

Description:

Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.

Type:

CWE-611

(Information Exposure Through XML External Entity Reference)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Intel -> Quartus prime

References:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Copyright 2024, cxsecurity.com