CVE-2024-31407
5.4
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Summary
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software | before version 24.1 | affected |
Weaknesses
- escalation of privilege
- CWE-427: Uncontrolled search path
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.