CVE-2023-24478
Last modified
CVE-2023-24478 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Quartus Prime | < 22.4 |
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.htmlPatch, Vendor Advisory
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-24478?
How severe is CVE-2023-24478?
How do I fix CVE-2023-24478?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-24472A denial of service vulnerability exists in the FitsOutput::…7.5
- CVE-2023-24473An information disclosure vulnerability exists in the TGAInp…7.5
- CVE-2023-24474Experion server may experience a DoS due to a heap overflow …7.5
- CVE-2023-24475Out of bounds read in some Intel(R) Server Board BMC firmwar…4.4
- CVE-2023-24476 An attacker with local access to the machine could record t…3.3
- CVE-2023-24477In certain conditions, depending on timing and the usage of …7
- CVE-2023-24479An authentication bypass vulnerability exists in the httpd n…9.8
- CVE-2023-2448The UserPro plugin for WordPress is vulnerable to unauthoriz…5.3
- CVE-2023-24480Controller DoS due to stack overflow when decoding a message…7.5
- CVE-2023-24481Improper access control in some Intel(R) Thunderbolt(TM) DCH…6.3
- CVE-2023-24482A vulnerability has been identified in COMOS V10.2 (All vers…9.8
- CVE-2023-24483A vulnerability has been identified that, if exploited, coul…7.8
Are you affected by CVE-2023-24478?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST