PT-2022-14923
CVE-2022-21205
·
Published
2022-02-09
·
Updated
2022-02-15
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition versions prior to 21.3
Description
The issue is related to an improper restriction of XML external entity reference, which may allow an unauthenticated user to potentially enable information disclosure via network access.
Recommendations
For versions prior to 21.3, update to version 21.3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾