Untrusted search path in Intel Quartus Prime Lite Edition Design and Intel Quartus Prime Standard Edition Design - CVE-2024-42405
Published: February 17, 2025
Vulnerability identifier: #VU104003
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-42405
CWE-ID: CWE-426
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path. A local user can execute arbitrary code with escalated privileges.
Affected software
Intel Quartus Prime Lite Edition Design
Intel Quartus Prime Standard Edition Design
Intel Quartus Prime Standard Edition Design
How to mitigate CVE-2024-42405
Install updates from vendor's website.
Intel Quartus Prime Lite Edition Design - update to 23.1.1 Patch 1.01std
Intel Quartus Prime Standard Edition Design - update to 23.1.1 Patch 1.01std
Intel Quartus Prime Standard Edition Design - update to 23.1.1 Patch 1.01std