PatchTheCVECVE-2024-47194: A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3)
CVE-2024-47194 is a medium-severity flaw (CVSS 6.7) affecting modelsim, questa. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges in installations where administrators or processes with elevated privileges launch vish2.exe from a user-writable directory.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.7 (Medium) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 96%) |
| CISA exploited list | No |
| Weakness | CWE-427 |
| Published | 2024-10-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-47194?
modelsim: upgrade to 2024.3; questa: upgrade to 2024.3. Exact commands for each OS are on this page.
Is CVE-2024-47194 being exploited?
CVE-2024-47194 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-47194 affect?
CVE-2024-47194 affects modelsim, questa. Severity is medium (CVSS 6.7). A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an au
How urgent is CVE-2024-47194?
Priority 25/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2024-53977 MEDIUM 6.7 UPGRADE UPGRADE A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1)
- CVE-2024-47196 MEDIUM 6.7 UPGRADE UPGRADE A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2)
- CVE-2024-47195 MEDIUM 6.7 UPGRADE UPGRADE A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3)