Executive Summary

CVE-2025-14605 is a medium severity security vulnerability in the System Console utility of Altera Quartus Prime Pro Edition for Windows (versions 17.0 through 25.1). It is an Uncontrolled Search Path Element vulnerability (CWE-427) that allows a Current Working Directory (CWD) planting attack. This means an attacker can exploit how the utility handles its search path to hijack the search order, potentially escalating their privileges on the system. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to privilege escalation on affected systems. An attacker with local access and low privileges, requiring user interaction, could exploit the vulnerability to gain higher privileges, potentially compromising the confidentiality, integrity, and availability of the system. [1]

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade to Quartus Prime Pro Edition version 25.1.1 or later, or use the System Console utility included in Quartus Prime Pro Edition Programmer and Tools 25.1.1 or later. This update corrects the search path handling to prevent Current Working Directory planting attacks. [1]

Useful 0 Not Useful 0