Lucene search

K
nvd[email protected]NVD:CVE-2024-23908
HistoryAug 14, 2024 - 2:15 p.m.

CVE-2024-23908

2024-08-1414:15:20
CWE-732
CWE-277
web.nvd.nist.gov
2
cve-2024-23908
intel fpga
privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

Insecure inherited permissions in some Flexlm License Daemons for Intel® FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelflexlm_license_daemons_for_intel_fpgaRange<11.19.5.0
VendorProductVersionCPE
intelflexlm_license_daemons_for_intel_fpga*cpe:2.3:a:intel:flexlm_license_daemons_for_intel_fpga:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-23908