Sign-up

ID

VAR-202202-0450


CVE

CVE-2022-21204


TITLE

Intel(R) Quartus(R) Prime Pro Edition  Vulnerability regarding improper default permissions in

Trust: 0.8

sources: JVNDB: JVNDB-2022-005077

DESCRIPTION

Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Intel(R) Quartus(R) Prime Pro Edition There is a vulnerability in improper default permissions.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Intel Quartus Prime Pro is a multi-platform design environment developed by Intel Corporation. This product is mainly used for programmable logic device programming. Intel Quartus Prime Pro Edition has a security vulnerability that stems from a potential security vulnerability in Intel Quartus Prime Pro and Standard Edition. An attacker could exploit this vulnerability to cause privilege escalation, denial of service, or information disclosure

Trust: 1.8

sources: NVD: CVE-2022-21204 // JVNDB: JVNDB-2022-005077 // VULHUB: VHN-406850 // VULMON: CVE-2022-21204

AFFECTED PRODUCTS

vendor:intelmodel:quartus primescope:ltversion:21.3

Trust: 1.0

vendor:インテルmodel:intel quartus prime proscope:eqversion: -

Trust: 0.8

vendor:インテルmodel:intel quartus prime proscope:eqversion:21.3

Trust: 0.8

sources: JVNDB: JVNDB-2022-005077 // NVD: CVE-2022-21204

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-21204
value: HIGH

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2022-21204
value: HIGH

Trust: 1.0

NVD: CVE-2022-21204
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202202-757
value: HIGH

Trust: 0.6

VULHUB: VHN-406850
value: MEDIUM

Trust: 0.1

VULMON: CVE-2022-21204
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2022-21204
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-406850
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2022-21204
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2022-21204
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-406850 // VULMON: CVE-2022-21204 // JVNDB: JVNDB-2022-005077 // CNNVD: CNNVD-202202-757 // NVD: CVE-2022-21204 // NVD: CVE-2022-21204

PROBLEMTYPE DATA

problemtype:CWE-276

Trust: 1.1

problemtype:Inappropriate default permissions (CWE-276) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-406850 // JVNDB: JVNDB-2022-005077 // NVD: CVE-2022-21204

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202202-757

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-202202-757

PATCH

title:INTEL-SA-00632url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 0.8

title:Intel Quartus Prime Pro Fixes for permissions and access control issues vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=182190

Trust: 0.6

sources: JVNDB: JVNDB-2022-005077 // CNNVD: CNNVD-202202-757

EXTERNAL IDS

db:NVDid:CVE-2022-21204

Trust: 3.4

db:JVNid:JVNVU99045838

Trust: 0.8

db:JVNDBid:JVNDB-2022-005077

Trust: 0.8

db:CNNVDid:CNNVD-202202-757

Trust: 0.7

db:CS-HELPid:SB2022020912

Trust: 0.6

db:AUSCERTid:ESB-2022.0546

Trust: 0.6

db:VULHUBid:VHN-406850

Trust: 0.1

db:VULMONid:CVE-2022-21204

Trust: 0.1

sources: VULHUB: VHN-406850 // VULMON: CVE-2022-21204 // JVNDB: JVNDB-2022-005077 // CNNVD: CNNVD-202202-757 // NVD: CVE-2022-21204

REFERENCES

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2022-21204

Trust: 1.4

url:https://jvn.jp/vu/jvnvu99045838/

Trust: 0.8

url:https://www.cybersecurity-help.cz/vdb/sb2022020912

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.0546

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/276.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-406850 // VULMON: CVE-2022-21204 // JVNDB: JVNDB-2022-005077 // CNNVD: CNNVD-202202-757 // NVD: CVE-2022-21204

SOURCES

db:VULHUBid:VHN-406850
db:VULMONid:CVE-2022-21204
db:JVNDBid:JVNDB-2022-005077
db:CNNVDid:CNNVD-202202-757
db:NVDid:CVE-2022-21204

LAST UPDATE DATE

2025-05-07T20:33:28.534000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-406850date:2022-02-15T00:00:00
db:VULMONid:CVE-2022-21204date:2022-02-15T00:00:00
db:JVNDBid:JVNDB-2022-005077date:2023-05-17T07:30:00
db:CNNVDid:CNNVD-202202-757date:2022-02-22T00:00:00
db:NVDid:CVE-2022-21204date:2025-05-05T17:17:44.077

SOURCES RELEASE DATE

db:VULHUBid:VHN-406850date:2022-02-09T00:00:00
db:VULMONid:CVE-2022-21204date:2022-02-09T00:00:00
db:JVNDBid:JVNDB-2022-005077date:2023-05-17T00:00:00
db:CNNVDid:CNNVD-202202-757date:2022-02-09T00:00:00
db:NVDid:CVE-2022-21204date:2022-02-09T23:15:18.033