CVE-2019-0171

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
n/aIntel(R) Quartus(R)Intel(R) Quartus(R) Prime all versions 15.1 to 18.1, and Intel(R) Quartus(R) II versions 9.1 to 15.0.

References

Timeline

Published
May 17, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-01729.8A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privCVE-2019-01737.6Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially eCVE-2019-01743.3Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclCVE-2019-01754.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01774.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01783.6Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01794.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01804.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01816.7Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01823.3Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01833.3Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01845.5Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor
CVE-2019-0171: High severity, CVSS 7.8 | Vulnix