CVE-2022-21205

Summary

Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.

Affected Software

Weaknesses

• information disclosure

ADP Enrichment

CVE Program Container

Additional References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

• ←Previous
• Next→