CVE-2022-38787
Medium
Description
Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS5.7
Exploit probability—
ProductIntel Agilex 7 Fpga F-series 019 Firmware
PublishedMay 10, 2023
First seenMay 10, 2023
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel agilex_7_fpga_f-series_019_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_023_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_006_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_008_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_027_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_014_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_012_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_f-series_022_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_022_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_041_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_035_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_027_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_019_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_040_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_i-series_023_firmware | v ≤ 2.7.0 | — |
| intel agilex_7_fpga_m-series_039_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_nx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_dx_2800_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_dx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_dx_1100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_1650_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_2500_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_850_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_400_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_1100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_tx_2800_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_650_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_400_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_1100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_850_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_1650_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_2500_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_sx_2800_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_mx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_mx_1650_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_2110_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_1660_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_650_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_400_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_850_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_2100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_1100_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_2500_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_10m_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_2800_fpga_firmware | v ≤ 2.7.0 | — |
| intel stratix_10_gx_1650_fpga_firmware | v ≤ 2.7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.