Vulnerability in Intel Flexlm License Daemons For Fpga
CVE-2024-23908
Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS: 0.001 (3.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Intel Flexlm_license_daemons_for_intel_fpga
- N/a Flexlm License Daemons For Intel(r) Fpga Software — versions before version v11.19.5.0
Weakness classification (CWE)
References
- secure@intel.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-23908?
- CVE-2024-23908 is a medium-severity vulnerability in Intel Flexlm License Daemons For Fpga, classified under Insecure Inherited Permissions. CVSS score: 6.7/10. Published 2024-08-14.
- How severe is CVE-2024-23908?
- Medium severity. CVSS v3 base score is 6.7 out of 10.