CVE-2024-38383: High severity intel quartus prime pro edition design software vulnerability
Published Nov 13, 2024
·Updated
Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
3 affected components
Intel Quartus Prime Pro Edition Design Software<24.2
All of the following
Intel Quartus Prime Software<24.2
Microsoft Windows
Remediation
Event History
Nov 13, 2024
CVE Published
via MITRE·09:11 PM
Data Sourced
via MITRE·09:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 26, 57072
Event
via NVD·03:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-38383?
CVE-2024-38383 is classified as a medium severity vulnerability.
2
How do I fix CVE-2024-38383?
To fix CVE-2024-38383, update to Intel Quartus Prime Pro Edition version 24.2 or later.
3
Who is impacted by CVE-2024-38383?
Authenticated users of Intel Quartus Prime Pro Edition software prior to version 24.2 are impacted by CVE-2024-38383.
4
What type of vulnerability is CVE-2024-38383?
CVE-2024-38383 is an escalated privilege vulnerability due to an uncontrolled search path.
5
Can CVE-2024-38383 be exploited remotely?
No, CVE-2024-38383 requires local access for an authenticated user to exploit.