Improper Check or Handling of Exceptional Conditions in Intel Quartus Prime Lite Edition Design - CVE-2024-21809

 

Improper Check or Handling of Exceptional Conditions in Intel Quartus Prime Lite Edition Design - CVE-2024-21809

Published: May 16, 2024


Vulnerability identifier: #VU89591
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-21809
CWE-ID: CWE-703
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper conditions check, which leads to security restrictions bypass and privilege escalation.


Affected software

Intel Quartus Prime Lite Edition Design

How to mitigate CVE-2024-21809

Install updates from vendor's website.

Intel Quartus Prime Lite Edition Design - update to 23.1

External References

Related Security Bulletins