CVE-2024-23909 - Vulnerability Details

Vendors	Products
Intel	Field Programmable Gate Array Software Development Kit For Opencl

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:::pro:::* cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:::standard:::* cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:::pro:::* cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:::standard:::* cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1::::standard::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3::::pro::: cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4::::pro:::

Type	Values Removed	Values Added
First Time appeared		Intel Intel field Programmable Gate Array Software Development Kit For Opencl
CPEs		cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl::::::::
Vendors & Products		Intel Intel field Programmable Gate Array Software Development Kit For Opencl
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.
Weaknesses		CWE-427
References		https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html
Metrics		cvssV3_1 `{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 5.4, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23909", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "state": "PUBLISHED", "assignerShortName": "intel", "dateReserved": "2024-02-28T04:00:21.187Z", "datePublished": "2024-08-14T13:45:27.023Z", "dateUpdated": "2024-08-14T14:03:27.123Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2024-08-14T13:45:27.023Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "description": "Uncontrolled search path", "cweId": "CWE-427", "type": "CWE"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) FPGA SDK for OpenCL(TM) software technology", "versions": [{"version": "See references", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."}], "references": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "cvssV4_0": {"version": "4.0", "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "attackVector": "LOCAL", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE"}}]}, "adp": [{"affected": [{"vendor": "intel", "product": "field_programmable_gate_array_software_development_kit_for_opencl", "cpes": ["cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T14:01:05.796342Z", "id": "CVE-2024-23909", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T14:03:27.123Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-23909 (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

state : PUBLISHED (string)

assignerShortName : intel (string)

dateReserved : 2024-02-28T04:00:21.187Z (string)

datePublished : 2024-08-14T13:45:27.023Z (string)

dateUpdated : 2024-08-14T14:03:27.123Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2024-08-14T13:45:27.023Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

description : Uncontrolled search path (string)

cweId : CWE-427 (string)

type : CWE (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) FPGA SDK for OpenCL(TM) software technology (string)

versions : [ »

0 : { »

version : See references (string)

status : affected (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

references : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

attackVector : LOCAL (string)

attackComplexity : HIGH (string)

privilegesRequired : LOW (string)

userInteraction : REQUIRED (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

cvssV4_0 : { »

version : 4.0 (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (string)

attackVector : LOCAL (string)

attackComplexity : HIGH (string)

attackRequirements : PRESENT (string)

privilegesRequired : LOW (string)

userInteraction : ACTIVE (string)

vulnConfidentialityImpact : HIGH (string)

vulnIntegrityImpact : HIGH (string)

vulnAvailabilityImpact : HIGH (string)

subConfidentialityImpact : NONE (string)

subIntegrityImpact : NONE (string)

subAvailabilityImpact : NONE (string)

}

]

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : intel (string)

product : field_programmable_gate_array_software_development_kit_for_opencl (string)

cpes : [ »

0 : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : * (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-14T14:01:05.796342Z (string)

id : CVE-2024-23909 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-14T14:03:27.123Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-23909", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-14T14:01:05.796342Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:*:*:*:*:*:*:*:*"], "vendor": "intel", "product": "field_programmable_gate_array_software_development_kit_for_opencl", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T14:03:19.784Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "cvssV4_0": {"version": "4.0", "baseScore": 5.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "ACTIVE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) FPGA SDK for OpenCL(TM) software technology", "versions": [{"status": "affected", "version": "See references"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "Uncontrolled search path"}]}], "providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2024-08-14T13:45:27.023Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23909", "state": "PUBLISHED", "dateUpdated": "2024-08-14T14:03:27.123Z", "dateReserved": "2024-02-28T04:00:21.187Z", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "datePublished": "2024-08-14T13:45:27.023Z", "assignerShortName": "intel"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-23909 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-08-14T14:01:05.796342Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:*:*:*:*:*:*:*:* (string)

]

vendor : intel (string)

product : field_programmable_gate_array_software_development_kit_for_opencl (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : * (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-14T14:03:19.784Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.7 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

cvssV4_0 : { »

version : 4.0 (string)

baseScore : 5.4 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (string)

userInteraction : ACTIVE (string)

attackComplexity : HIGH (string)

attackRequirements : PRESENT (string)

privilegesRequired : LOW (string)

subIntegrityImpact : NONE (string)

vulnIntegrityImpact : HIGH (string)

subAvailabilityImpact : NONE (string)

vulnAvailabilityImpact : HIGH (string)

subConfidentialityImpact : NONE (string)

vulnConfidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) FPGA SDK for OpenCL(TM) software technology (string)

versions : [ »

0 : { »

status : affected (string)

version : See references (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html (string)

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-427 (string)

description : Uncontrolled search path (string)

}

]

}

]

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2024-08-14T13:45:27.023Z (string)

}

cveMetadata : { »

cveId : CVE-2024-23909 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-14T14:03:27.123Z (string)

dateReserved : 2024-02-28T04:00:21.187Z (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

datePublished : 2024-08-14T13:45:27.023Z (string)

assignerShortName : intel (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:pro:*:*:*", "matchCriteriaId": "31BFC77B-63EF-4A98-BC60-159CED8B08E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:standard:*:*:*", "matchCriteriaId": "ECB72360-F39C-4E01-B63E-24AFAA3FBBCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:pro:*:*:*", "matchCriteriaId": "276AAB67-9B1F-44EA-AD30-EFEA3ACE9436", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:standard:*:*:*", "matchCriteriaId": "7BAB04E2-90A5-4EDE-BBDE-B1F96E2B4FB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:pro:*:*:*", "matchCriteriaId": "CB9F6105-B0B9-48EF-9B48-728B48DE4E78", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:standard:*:*:*", "matchCriteriaId": "3E7E25DD-47F2-4754-9EA4-880C481EBC36", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:pro:*:*:*", "matchCriteriaId": "604E6194-5C3B-4B11-9E84-030EBFE3C33D", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:standard:*:*:*", "matchCriteriaId": "C9417D4C-883D-4828-AAB1-AC003D7A7DEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:pro:*:*:*", "matchCriteriaId": "4A40D4F0-0C25-4AB0-A56B-2BF23FEB52FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:standard:*:*:*", "matchCriteriaId": "59AB3FF5-8CF6-4EC0-B09F-C6253CECB440", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:pro:*:*:*", "matchCriteriaId": "5443B45A-313C-4C97-9FAF-4FBC5D893B09", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:standard:*:*:*", "matchCriteriaId": "0D8A4D04-3AE1-41BE-9596-3A29EAF3AF5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:pro:*:*:*", "matchCriteriaId": "992EBFA9-A583-4CE8-BB5E-60BFFC0C6760", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:standard:*:*:*", "matchCriteriaId": "22FC2247-2E6B-4203-9D13-9A8C614E579F", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:pro:*:*:*", "matchCriteriaId": "AA4530CE-D098-4400-BFE2-2D30011F5020", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:standard:*:*:*", "matchCriteriaId": "77DD87B7-12EA-4A19-9510-0C452ACC9F33", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:pro:*:*:*", "matchCriteriaId": "09C209A6-BF65-444C-A840-FB93FA2F8185", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:standard:*:*:*", "matchCriteriaId": "F8651853-2A7F-4955-8CCF-688171C5321F", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:pro:*:*:*", "matchCriteriaId": "BEDCD55A-17A5-49A2-9E71-3BD1E0FF65E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:standard:*:*:*", "matchCriteriaId": "D228509F-F82F-4CA4-8643-D9F4694CB740", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:pro:*:*:*", "matchCriteriaId": "1E61AF90-76BC-46FD-A32C-62C4D17EA277", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:standard:*:*:*", "matchCriteriaId": "6FB570E8-3E1B-42E4-A9DA-FC43F48578DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:pro:*:*:*", "matchCriteriaId": "826D188C-352E-402A-8069-0A717BB53B96", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:standard:*:*:*", "matchCriteriaId": "B8E2CE09-80E4-4730-9CA8-09A70E2ACD06", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:pro:*:*:*", "matchCriteriaId": "FDC51D37-FB6B-497E-B6BC-61BE90357449", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:standard:*:*:*", "matchCriteriaId": "07B861CD-0090-47FE-B4CD-D89D70CFD3DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:pro:*:*:*", "matchCriteriaId": "07537F69-D4F4-4648-BD1F-9468A5078A6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:standard:*:*:*", "matchCriteriaId": "DB8DC11C-72CD-42CC-9945-23F040498F19", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2:*:*:*:pro:*:*:*", "matchCriteriaId": "B2F1954B-D4BA-463D-971E-24088345987A", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3:*:*:*:pro:*:*:*", "matchCriteriaId": "F65A15C1-AACA-4081-96E8-8BBD354F75DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4:*:*:*:pro:*:*:*", "matchCriteriaId": "02C01340-C6DE-4BB1-8AEA-0B277EA9EDDA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": " La ruta de b\u00fasqueda no controlada en algunas tecnolog\u00edas de software Intel(R) FPGA SDK para OpenCL(TM) puede permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a trav\u00e9s del acceso local."}], "id": "CVE-2024-23909", "lastModified": "2024-09-06T20:33:05.670", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@intel.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "HIGH", "vulnerableSystemConfidentiality": "HIGH", "vulnerableSystemIntegrity": "HIGH"}, "source": "secure@intel.com", "type": "Secondary"}]}, "published": "2024-08-14T14:15:20.447", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-427"}], "source": "secure@intel.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:pro:*:*:* (string)

matchCriteriaId : 31BFC77B-63EF-4A98-BC60-159CED8B08E4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:standard:*:*:* (string)

matchCriteriaId : ECB72360-F39C-4E01-B63E-24AFAA3FBBCD (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:pro:*:*:* (string)

matchCriteriaId : 276AAB67-9B1F-44EA-AD30-EFEA3ACE9436 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:standard:*:*:* (string)

matchCriteriaId : 7BAB04E2-90A5-4EDE-BBDE-B1F96E2B4FB2 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : CB9F6105-B0B9-48EF-9B48-728B48DE4E78 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : 3E7E25DD-47F2-4754-9EA4-880C481EBC36 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:pro:*:*:* (string)

matchCriteriaId : 604E6194-5C3B-4B11-9E84-030EBFE3C33D (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:standard:*:*:* (string)

matchCriteriaId : C9417D4C-883D-4828-AAB1-AC003D7A7DEC (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : 4A40D4F0-0C25-4AB0-A56B-2BF23FEB52FE (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : 59AB3FF5-8CF6-4EC0-B09F-C6253CECB440 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:pro:*:*:* (string)

matchCriteriaId : 5443B45A-313C-4C97-9FAF-4FBC5D893B09 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:standard:*:*:* (string)

matchCriteriaId : 0D8A4D04-3AE1-41BE-9596-3A29EAF3AF5E (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : 992EBFA9-A583-4CE8-BB5E-60BFFC0C6760 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : 22FC2247-2E6B-4203-9D13-9A8C614E579F (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:pro:*:*:* (string)

matchCriteriaId : AA4530CE-D098-4400-BFE2-2D30011F5020 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:standard:*:*:* (string)

matchCriteriaId : 77DD87B7-12EA-4A19-9510-0C452ACC9F33 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : 09C209A6-BF65-444C-A840-FB93FA2F8185 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : F8651853-2A7F-4955-8CCF-688171C5321F (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:pro:*:*:* (string)

matchCriteriaId : BEDCD55A-17A5-49A2-9E71-3BD1E0FF65E6 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:standard:*:*:* (string)

matchCriteriaId : D228509F-F82F-4CA4-8643-D9F4694CB740 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : 1E61AF90-76BC-46FD-A32C-62C4D17EA277 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : 6FB570E8-3E1B-42E4-A9DA-FC43F48578DC (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:pro:*:*:* (string)

matchCriteriaId : 826D188C-352E-402A-8069-0A717BB53B96 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:standard:*:*:* (string)

matchCriteriaId : B8E2CE09-80E4-4730-9CA8-09A70E2ACD06 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : FDC51D37-FB6B-497E-B6BC-61BE90357449 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : 07B861CD-0090-47FE-B4CD-D89D70CFD3DE (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:pro:*:*:* (string)

matchCriteriaId : 07537F69-D4F4-4648-BD1F-9468A5078A6A (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:standard:*:*:* (string)

matchCriteriaId : DB8DC11C-72CD-42CC-9945-23F040498F19 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2:*:*:*:pro:*:*:* (string)

matchCriteriaId : B2F1954B-D4BA-463D-971E-24088345987A (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3:*:*:*:pro:*:*:* (string)

matchCriteriaId : F65A15C1-AACA-4081-96E8-8BBD354F75DD (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4:*:*:*:pro:*:*:* (string)

matchCriteriaId : 02C01340-C6DE-4BB1-8AEA-0B277EA9EDDA (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

1 : { »

lang : es (string)

value : La ruta de búsqueda no controlada en algunas tecnologías de software Intel(R) FPGA SDK para OpenCL(TM) puede permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a través del acceso local. (string)

}

]

id : CVE-2024-23909 (string)

lastModified : 2024-09-06T20:33:05.670 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : secure@intel.com (string)

type : Secondary (string)

}

]

cvssMetricV40 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackRequirements : PRESENT (string)

attackVector : LOCAL (string)

automatable : NOT_DEFINED (string)

availabilityRequirements : NOT_DEFINED (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityRequirements : NOT_DEFINED (string)

exploitMaturity : NOT_DEFINED (string)

integrityRequirements : NOT_DEFINED (string)

modifiedAttackComplexity : NOT_DEFINED (string)

modifiedAttackRequirements : NOT_DEFINED (string)

modifiedAttackVector : NOT_DEFINED (string)

modifiedPrivilegesRequired : NOT_DEFINED (string)

modifiedSubsequentSystemAvailability : NOT_DEFINED (string)

modifiedSubsequentSystemConfidentiality : NOT_DEFINED (string)

modifiedSubsequentSystemIntegrity : NOT_DEFINED (string)

modifiedUserInteraction : NOT_DEFINED (string)

modifiedVulnerableSystemAvailability : NOT_DEFINED (string)

modifiedVulnerableSystemConfidentiality : NOT_DEFINED (string)

modifiedVulnerableSystemIntegrity : NOT_DEFINED (string)

privilegesRequired : LOW (string)

providerUrgency : NOT_DEFINED (string)

recovery : NOT_DEFINED (string)

safety : NOT_DEFINED (string)

subsequentSystemAvailability : NONE (string)

subsequentSystemConfidentiality : NONE (string)

subsequentSystemIntegrity : NONE (string)

userInteraction : ACTIVE (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (string)

version : 4.0 (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

vulnerableSystemAvailability : HIGH (string)

vulnerableSystemConfidentiality : HIGH (string)

vulnerableSystemIntegrity : HIGH (string)

}

source : secure@intel.com (string)

type : Secondary (string)

}

]

}

published : 2024-08-14T14:15:20.447 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-427 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-427 (string)

}

]

source : secure@intel.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Attack Requirements Present

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Attack Requirements Present

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object