CVE-2022-27233: High severity intel quartus prime software vulnerability
XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-27233?
CVE-2022-27233 is a vulnerability that involves XML injection in the Quartus Prime Programmer component included in the Intel Quartus Prime Pro and Standard edition software.
What is the severity of CVE-2022-27233?
CVE-2022-27233 has a severity level of high, with a severity value of 7.5.
How does CVE-2022-27233 impact the affected software?
CVE-2022-27233 may allow an unauthenticated user to potentially enable information disclosure via network access in Intel Quartus Prime Pro and Standard edition software.
Which versions of Intel Quartus Prime are affected by CVE-2022-27233?
CVE-2022-27233 affects Intel Quartus Prime Pro versions up to and excluding 22.1, and Intel Quartus Prime Standard versions up to and including 21.1.
How can I mitigate the XML injection vulnerability in Quartus Prime Programmer?
To mitigate the XML injection vulnerability in Quartus Prime Programmer, it is recommended to update to a version that is not affected by the vulnerability.