Sign-up

ID

VAR-202202-0454


CVE

CVE-2022-21220


TITLE

Intel(R) Quartus(R) Prime Pro Edition  In  XML  External entity vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2022-005074

DESCRIPTION

Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. (DoS) It may be in a state. Intel Quartus Prime Pro is a multi-platform design environment developed by Intel Corporation. This product is mainly used for programmable logic device programming. Intel Quartus Prime Pro Edition has a security vulnerability that stems from a potential security vulnerability in Intel Quartus Prime Pro and Standard Edition. An attacker could exploit this vulnerability to cause privilege escalation, denial of service, or information disclosure

Trust: 1.8

sources: NVD: CVE-2022-21220 // JVNDB: JVNDB-2022-005074 // VULHUB: VHN-406854 // VULMON: CVE-2022-21220

AFFECTED PRODUCTS

vendor:intelmodel:quartus primescope:ltversion:21.3

Trust: 1.0

vendor:インテルmodel:intel quartus prime proscope:eqversion: -

Trust: 0.8

vendor:インテルmodel:intel quartus prime proscope:eqversion:21.3

Trust: 0.8

sources: JVNDB: JVNDB-2022-005074 // NVD: CVE-2022-21220

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-21220
value: HIGH

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2022-21220
value: HIGH

Trust: 1.0

NVD: CVE-2022-21220
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202202-759
value: HIGH

Trust: 0.6

VULHUB: VHN-406854
value: MEDIUM

Trust: 0.1

VULMON: CVE-2022-21220
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2022-21220
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-406854
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2022-21220
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

NVD: CVE-2022-21220
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-406854 // VULMON: CVE-2022-21220 // JVNDB: JVNDB-2022-005074 // CNNVD: CNNVD-202202-759 // NVD: CVE-2022-21220 // NVD: CVE-2022-21220

PROBLEMTYPE DATA

problemtype:CWE-611

Trust: 1.1

problemtype:XML Improper restriction of external entity references (CWE-611) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-406854 // JVNDB: JVNDB-2022-005074 // NVD: CVE-2022-21220

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202202-759

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-202202-759

PATCH

title:INTEL-SA-00632url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 0.8

title:Intel Quartus Prime Pro Fixes for code issue vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=182192

Trust: 0.6

title:CVE-2022-XXXXurl:https://github.com/AlphabugX/CVE-2022-23305

Trust: 0.1

title:CVE-2022-XXXXurl:https://github.com/AlphabugX/CVE-2022-RCE

Trust: 0.1

sources: VULMON: CVE-2022-21220 // JVNDB: JVNDB-2022-005074 // CNNVD: CNNVD-202202-759

EXTERNAL IDS

db:NVDid:CVE-2022-21220

Trust: 3.4

db:JVNid:JVNVU99045838

Trust: 0.8

db:JVNDBid:JVNDB-2022-005074

Trust: 0.8

db:CNNVDid:CNNVD-202202-759

Trust: 0.7

db:CS-HELPid:SB2022020912

Trust: 0.6

db:AUSCERTid:ESB-2022.0546

Trust: 0.6

db:VULHUBid:VHN-406854

Trust: 0.1

db:VULMONid:CVE-2022-21220

Trust: 0.1

sources: VULHUB: VHN-406854 // VULMON: CVE-2022-21220 // JVNDB: JVNDB-2022-005074 // CNNVD: CNNVD-202202-759 // NVD: CVE-2022-21220

REFERENCES

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2022-21220

Trust: 1.4

url:https://jvn.jp/vu/jvnvu99045838/

Trust: 0.8

url:https://www.cybersecurity-help.cz/vdb/sb2022020912

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.0546

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/611.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://github.com/alphabugx/cve-2022-23305

Trust: 0.1

sources: VULHUB: VHN-406854 // VULMON: CVE-2022-21220 // JVNDB: JVNDB-2022-005074 // CNNVD: CNNVD-202202-759 // NVD: CVE-2022-21220

SOURCES

db:VULHUBid:VHN-406854
db:VULMONid:CVE-2022-21220
db:JVNDBid:JVNDB-2022-005074
db:CNNVDid:CNNVD-202202-759
db:NVDid:CVE-2022-21220

LAST UPDATE DATE

2025-05-07T20:51:33.493000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-406854date:2022-02-15T00:00:00
db:VULMONid:CVE-2022-21220date:2022-02-15T00:00:00
db:JVNDBid:JVNDB-2022-005074date:2023-05-17T07:29:00
db:CNNVDid:CNNVD-202202-759date:2022-02-22T00:00:00
db:NVDid:CVE-2022-21220date:2025-05-05T17:17:45.057

SOURCES RELEASE DATE

db:VULHUBid:VHN-406854date:2022-02-09T00:00:00
db:VULMONid:CVE-2022-21220date:2022-02-09T00:00:00
db:JVNDBid:JVNDB-2022-005074date:2023-05-17T00:00:00
db:CNNVDid:CNNVD-202202-759date:2022-02-09T00:00:00
db:NVDid:CVE-2022-21220date:2022-02-09T23:15:18.157