CVE-2023-49614

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-496157.5Improper input validation in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potenCVE-2023-496179.1The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacCVE-2023-496187.5Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to poCVE-2023-496193.1Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affeCVE-2023-49625.4The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in versions up to, and includiCVE-2023-496206.5Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (which almost used in sqCVE-2023-496219.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected aCVE-2023-496229.8Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the material_biCVE-2023-496249.8Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_billCVE-2023-496259.8Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submCVE-2023-49635.4The WS Facebook Like Box Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ws-facebook-likebox' shortcode in verCVE-2023-496339.8Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' parameter of the buyer_de
CVE-2023-49614: Medium severity, CVSS 5.7 | Vulnix