What is CVE-2022-27233?

CVE-2022-27233 is a medium-severity vulnerability in Intel Quartus Prime, classified under XML Injection (Blind XPath Injection). CVSS score: 6.5/10. Published 2022-11-11.

How severe is CVE-2022-27233?

Medium severity. CVSS v3 base score is 6.5 out of 10.

XPath Injection in Intel Quartus Prime

CVE-2022-27233

XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.

EPSS: 0.006 (45.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Intel Quartus_prime
N/a Intel(r) Quartus Prime Pro And Standard Edition Software — versions See reference

Weakness classification (CWE)

CWE-91 — XML Injection (Blind XPath Injection)

References

secure@intel.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-27233?: CVE-2022-27233 is a medium-severity vulnerability in Intel Quartus Prime, classified under XML Injection (Blind XPath Injection). CVSS score: 6.5/10. Published 2022-11-11.
How severe is CVE-2022-27233?: Medium severity. CVSS v3 base score is 6.5 out of 10.