VULNERABILITY INTELLIGENCE

CVE-2024-23907

CVSS score5.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-08-14
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references