NetSight
medium5.7

CVE-2022-38787

Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalat…

Impact

Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelAgilex 7 Fpga F-Series 019 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 023 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 006 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 008 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 027 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 014 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 012 Firmware
through 2.7.0
IntelAgilex 7 Fpga F-Series 022 Firmware
through 2.7.0
IntelAgilex 7 Fpga I-Series 022 Firmware
through 2.7.0
IntelAgilex 7 Fpga I-Series 041 Firmware
through 2.7.0
IntelAgilex 7 Fpga I-Series 035 Firmware
through 2.7.0
IntelAgilex 7 Fpga I-Series 027 Firmware
through 2.7.0

Weakness classification

References