VULNERABILITY INTELLIGENCE
CVE-2024-21837
CVSS score6.7 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness classification
- secure@intel.com: CWE-427
- nvd@nist.gov: CWE-427
Primary references
- secure@intel.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory