VDB

CVE-2020-8737

CVE-2020-8737 PUBLISHED CVSS 6.800000190734863 MEDIUM

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.

EPSS 0.08% · 22.8th percentile

Risk Scores

CVSS 3.1
6.800000190734863
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.08%
22.8th percentile

Affected Products

VendorProductVersions
n/aIntel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro softwarebefore version 20.1
intelquartus_prime0
intelstratix_10_fpga_firmware

Timeline

  • Nov 12, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›