Intel Quartus Prime Pro EoP Vulnerability (CVE-2024-31407)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: INTEL-SA-01148 2. Affected Product: Intel® High Level Synthesis Compiler software for Intel® Quartus® Prime Pro Edition Software before version 24.1 3. Vulnerability Type: Escalation of Privilege 4. Severity: Medium 5. Vulnerability Description: An uncontrolled search path in certain Intel® High Level Synthesis Compiler software allows unauthorized users to achieve privilege escalation via local access. 6. CVE ID: CVE-2024-31407 7. CVSS Base Score: 3.1 (Medium) and 4.0 (Medium) 8. Affected Software Versions: Intel® Quartus® Prime Pro Edition Software before version 24.1 9. Recommended Action: Upgrade to Intel® Quartus® Prime Pro Edition Software version 24.1 or later. 10. Update Download Link: https://www.intel.com/content/www/us/en/software-kit/819138 11. Reporting Vulnerabilities: For information regarding security issues or vulnerabilities, send an email to secure@intel.com, and encrypt sensitive information using the PGP public key. 12. Product Support: For questions about product security features, technical support, or product updates, visit the Support & Downloads page. This information helps users understand the details of the vulnerability, the scope of affected products, and how to perform security updates and report vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Quartus Prime Pro EoP Vulnerability (CVE-2024-31407)