Vulnerability Description
Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Agilex 7 Fpga F-Series 006 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 006 | - |
| Intel | Agilex 7 Fpga F-Series 008 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 008 | - |
| Intel | Agilex 7 Fpga F-Series 012 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 012 | - |
| Intel | Agilex 7 Fpga F-Series 014 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 014 | - |
| Intel | Agilex 7 Fpga F-Series 019 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 019 | - |
| Intel | Agilex 7 Fpga F-Series 022 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 022 | - |
| Intel | Agilex 7 Fpga F-Series 023 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 023 | - |
| Intel | Agilex 7 Fpga F-Series 027 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga F-Series 027 | - |
| Intel | Agilex 7 Fpga I-Series 019 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga I-Series 019 | - |
| Intel | Agilex 7 Fpga I-Series 022 Firmware | < 2.8.1 |
| Intel | Agilex 7 Fpga I-Series 022 | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.PatchVendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.PatchVendor Advisory
FAQ
What is CVE-2023-22327?
CVE-2023-22327 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.
How severe is CVE-2023-22327?
CVE-2023-22327 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22327?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Agilex 7 Fpga F-Series 006 Firmware, Intel Agilex 7 Fpga F-Series 006, Intel Agilex 7 Fpga F-Series 008 Firmware, Intel Agilex 7 Fpga F-Series 008, Intel Agilex 7 Fpga F-Series 012 Firmware.