Lucene search

IntelCVE-2024-23908

HistoryAug 14, 2024 - 2:15 p.m.

CVE-2024-23908

2024-08-1414:15:20

CWE-732

CWE-277

intel

web.nvd.nist.gov

flexlm license daemons

insecure permissions

privilege escalation

local access

intel(r) fpga software

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS4

5.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.2

Confidence

High

EPSS

Percentile

9.5%

JSON

Insecure inherited permissions in some Flexlm License Daemons for Intel® FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Vulnrichment

Node

intelflexlm_license_daemons_for_intel_fpgaRange<11.19.5.0

VendorProductVersionCPE
intelflexlm_license_daemons_for_intel_fpga*cpe:2.3:a:intel:flexlm_license_daemons_for_intel_fpga:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	flexlm_license_daemons_for_intel_fpga	*	cpe:2.3:a:intel:flexlm_license_daemons_for_intel_fpga::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Flexlm License Daemons for Intel(R) FPGA software",
    "versions": [
      {
        "version": "before version v11.19.5.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01107.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS4

5.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.2

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-23908