CVEvulnerability
CVE-2020-24454
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-611
Description
Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access.
Affected configurations
• intel quartus prime (<= 20.1)
• intel quartus prime (< 20.3)
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00446 Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00446 Patch, Vendor Advisory