PT-2025-46379 · Intel · Intel(R) Cip

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-20050

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description An uncontrolled search path exists in some Intel(R) CIP software. This issue, occurring within Ring 3 User Applications, may allow an escalation of privilege. A local, unprivileged software adversary with an authenticated user and a high complexity attack may enable local code execution. This requires active user interaction and does not require special internal knowledge. The potential impact to the system includes confidentiality, integrity, and availability.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-20050

Affected Products

Intel(R) Cip

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20050 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20050 · Security Note
• https://twitter.com/CVEnew/status/1988452636799234278 · Twitter Post
• https://t.me/cveNotify/144088 · Telegram Post