Intel Quickassist Technology Engine vulnerabilities

2 CVEs affecting Intel Quickassist Technology Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43507, published 2023-05-10.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5681, published 2017-03-07. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra…
• CVE-2022-43507, published 2023-05-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.