VULNERABILITY INTELLIGENCE
CVE-2022-27233
CVSS score6.5 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2022-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
Weakness classification
- nvd@nist.gov: CWE-91
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-91
Primary references
- secure@intel.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory