Vulnerabilities > CVE-2020-8737 - Unspecified vulnerability in Intel Quartus Prime and Stratix 10 Fpga Firmware

CVSS 6.8 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

low complexity

intel

NVD

Published: 2020-11-12

Updated: 2021-07-21

Summary

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Quartus Prime - Intel Quartus Prime 3.0 Intel Quartus Prime 4.0 Intel Quartus Prime 4.1 Intel Quartus Prime 4.2 Intel Quartus Prime 5.0 Intel Quartus Prime 5.1 Intel Quartus Prime 6.0 Intel Quartus Prime 6.1 Intel Quartus Prime 7.0 Intel Quartus Prime 7.1 Intel Quartus Prime 7.2 Intel Quartus Prime 8.0 Intel Quartus Prime 8.1 Intel Quartus Prime 9.0 Intel Quartus Prime 9.1 Intel Quartus Prime 10.0 Intel Quartus Prime 10.1 Intel Quartus Prime 11.1 Intel Quartus Prime 12.0 Intel Quartus Prime 12.1 Intel Quartus Prime 13.0 Intel Quartus Prime 13.1 Intel Quartus Prime 14.0 Intel Quartus Prime 14.1 Intel Quartus Prime 15.0 Intel Quartus Prime 15.1 Intel Quartus Prime 16.0 Intel Quartus Prime 16.1 Intel Quartus Prime 17.0 Intel Quartus Prime 17.1 Intel Quartus Prime 18.0 Intel Quartus Prime 18.1 Intel Quartus Prime 19.1 Intel Quartus Prime 19.2 Intel Quartus Prime 19.3 Intel Quartus Prime 19.4	39
OS	Intel Intel Stratix 10 Fpga Firmware -	1
Hardware	Intel Intel Stratix 10 Fpga -	1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388