Sign-up

ID

VAR-202202-0451


CVE

CVE-2022-21203


TITLE

Intel(R) Quartus(R) Prime Standard  Edition  Improper Permission Preservation Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-005078

DESCRIPTION

Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access. (DoS) It may be in a state. Intel Quartus Prime Pro is a multi-platform design environment developed by Intel Corporation. This product is mainly used for programmable logic device programming. Intel Quartus Prime Pro Edition has a security vulnerability that stems from a potential security vulnerability in Intel Quartus Prime Pro and Standard Edition. An attacker could exploit this vulnerability to cause privilege escalation, denial of service, or information disclosure

Trust: 1.8

sources: NVD: CVE-2022-21203 // JVNDB: JVNDB-2022-005078 // VULHUB: VHN-406849 // VULMON: CVE-2022-21203

AFFECTED PRODUCTS

vendor:intelmodel:quartus primescope:ltversion:21.1

Trust: 1.0

vendor:インテルmodel:quartus primescope:eqversion:21.1

Trust: 0.8

vendor:インテルmodel:quartus primescope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-005078 // NVD: CVE-2022-21203

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-21203
value: HIGH

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2022-21203
value: HIGH

Trust: 1.0

NVD: CVE-2022-21203
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202202-756
value: HIGH

Trust: 0.6

VULHUB: VHN-406849
value: MEDIUM

Trust: 0.1

VULMON: CVE-2022-21203
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2022-21203
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-406849
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2022-21203
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2022-21203
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-406849 // VULMON: CVE-2022-21203 // JVNDB: JVNDB-2022-005078 // CNNVD: CNNVD-202202-756 // NVD: CVE-2022-21203 // NVD: CVE-2022-21203

PROBLEMTYPE DATA

problemtype:CWE-281

Trust: 1.1

problemtype:Improper retention of permissions (CWE-281) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-406849 // JVNDB: JVNDB-2022-005078 // NVD: CVE-2022-21203

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202202-756

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-202202-756

PATCH

title:INTEL-SA-00632url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 0.8

title:Intel Quartus Prime Pro Fixes for permissions and access control issues vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=181771

Trust: 0.6

title:CVE-2022-XXXXurl:https://github.com/AlphabugX/CVE-2022-23305

Trust: 0.1

title:CVE-2022-XXXXurl:https://github.com/AlphabugX/CVE-2022-RCE

Trust: 0.1

sources: VULMON: CVE-2022-21203 // JVNDB: JVNDB-2022-005078 // CNNVD: CNNVD-202202-756

EXTERNAL IDS

db:NVDid:CVE-2022-21203

Trust: 3.4

db:JVNid:JVNVU99045838

Trust: 0.8

db:JVNDBid:JVNDB-2022-005078

Trust: 0.8

db:CNNVDid:CNNVD-202202-756

Trust: 0.7

db:CS-HELPid:SB2022020912

Trust: 0.6

db:AUSCERTid:ESB-2022.0546

Trust: 0.6

db:VULHUBid:VHN-406849

Trust: 0.1

db:VULMONid:CVE-2022-21203

Trust: 0.1

sources: VULHUB: VHN-406849 // VULMON: CVE-2022-21203 // JVNDB: JVNDB-2022-005078 // CNNVD: CNNVD-202202-756 // NVD: CVE-2022-21203

REFERENCES

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2022-21203

Trust: 1.4

url:https://jvn.jp/vu/jvnvu99045838/

Trust: 0.8

url:https://www.cybersecurity-help.cz/vdb/sb2022020912

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.0546

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/281.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://github.com/alphabugx/cve-2022-23305

Trust: 0.1

sources: VULHUB: VHN-406849 // VULMON: CVE-2022-21203 // JVNDB: JVNDB-2022-005078 // CNNVD: CNNVD-202202-756 // NVD: CVE-2022-21203

SOURCES

db:VULHUBid:VHN-406849
db:VULMONid:CVE-2022-21203
db:JVNDBid:JVNDB-2022-005078
db:CNNVDid:CNNVD-202202-756
db:NVDid:CVE-2022-21203

LAST UPDATE DATE

2025-05-07T19:59:35.489000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-406849date:2022-02-15T00:00:00
db:VULMONid:CVE-2022-21203date:2022-02-15T00:00:00
db:JVNDBid:JVNDB-2022-005078date:2023-05-17T07:37:00
db:CNNVDid:CNNVD-202202-756date:2022-02-22T00:00:00
db:NVDid:CVE-2022-21203date:2025-05-05T17:17:43.880

SOURCES RELEASE DATE

db:VULHUBid:VHN-406849date:2022-02-09T00:00:00
db:VULMONid:CVE-2022-21203date:2022-02-09T00:00:00
db:JVNDBid:JVNDB-2022-005078date:2023-05-17T00:00:00
db:CNNVDid:CNNVD-202202-756date:2022-02-09T00:00:00
db:NVDid:CVE-2022-21203date:2022-02-09T23:15:17.990