Potential Local Privilege Escalation Vulnerability in Intel Quartus Prime Software
CVE-2024-38668

7.8HIGH

Key Information:

Vendor
Intel
Status
Quartus Prime
Vendor
CVE Published:
13 November 2024

Summary

The vulnerability allows an authenticated user to exploit an uncontrolled search path within Intel Quartus Prime Standard Edition software, leading to potential privilege escalation with local access. This issue affects versions prior to 23.1.1, and it underscores the importance of maintaining updates and employing security best practices to mitigate risks.

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.