CVE-2024-23909

Q: What is the severity of CVE-2024-23909?

CVE-2024-23909 has a CVSS score of 6.7 (MEDIUM). This vulnerability in Intel FPGA SDK for OpenCL allows authenticated local users to escalate privileges by manipulating the search path for DLLs or shared libraries. It affects systems running vulnerable versions of the Intel FPGA SDK for OpenCL software. Attackers could gain higher privileges than intended on affected systems.

6.7 MEDIUM

📋 TL;DR

This vulnerability in Intel FPGA SDK for OpenCL allows authenticated local users to escalate privileges by manipulating the search path for DLLs or shared libraries. It affects systems running vulnerable versions of the Intel FPGA SDK for OpenCL software. Attackers could gain higher privileges than intended on affected systems.

💻 Affected Systems

Products:

Intel FPGA SDK for OpenCL

Versions: All versions prior to version 23.4

Operating Systems: Windows, Linux

Default Config Vulnerable: ⚠️ Yes

Notes: Requires Intel FPGA SDK for OpenCL to be installed and the user to have authenticated access to the system.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

An authenticated attacker could gain SYSTEM/root privileges on the affected machine, potentially taking full control of the system.

🟠

Likely Case

An authenticated user with limited privileges could elevate to administrator/root access to install malware, modify system configurations, or access sensitive data.

🟢

If Mitigated

With proper access controls and least privilege principles, impact is limited to users who already have some level of authenticated access to the system.

🌐 Internet-Facing: LOW - This requires local authenticated access, not remotely exploitable.

🏢 Internal Only: MEDIUM - Internal users with authenticated access could exploit this for privilege escalation within the environment.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires authenticated access and knowledge of DLL planting/search path manipulation techniques.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Version 23.4 and later

Vendor Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html

Restart Required: Yes

Instructions:

1. Download Intel FPGA SDK for OpenCL version 23.4 or later from Intel's website. 2. Uninstall previous versions. 3. Install the updated version. 4. Restart the system to ensure changes take effect.

🔧 Temporary Workarounds

Restrict user permissions

all

Apply principle of least privilege to limit which users can execute FPGA SDK components

Monitor DLL loading

all

Implement monitoring for unusual DLL loading behavior from FPGA SDK processes

🧯 If You Can't Patch

Restrict access to systems with vulnerable FPGA SDK installations to only trusted, necessary users
Implement application whitelisting to prevent execution of unauthorized binaries/DLLs

🔍 How to Verify

Check if Vulnerable:

Check installed version of Intel FPGA SDK for OpenCL. If version is earlier than 23.4, the system is vulnerable.

Check Version:

On Windows: Check Programs and Features. On Linux: Check package manager or run 'aocl version' if available.

Verify Fix Applied:

Verify that Intel FPGA SDK for OpenCL version is 23.4 or higher after update.

📡 Detection & Monitoring

Log Indicators:

Unusual process creation from FPGA SDK executables
DLL loading from unexpected locations by FPGA processes

Network Indicators:

Not applicable - local privilege escalation only

SIEM Query:

Process creation where parent process contains 'aocl' or 'intel_fpga' AND child process has elevated privileges

📊 Metadata

CVE ID: CVE-2024-23909

CVSS v3 Score: 6.7 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE: CWE-427

Published: August 14, 2024

Last Updated: September 6, 2024

🔗 References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

Field Programmable Gate Array Software Development Kit For Opencl by Intel

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Restrict user permissions

Monitor DLL loading

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities