PT-2025-46381 · Intel · Intel(R) Cip

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-20614

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description The software contains a flaw related to external control of file name or path within Ring 3 User Applications, potentially allowing an escalation of privilege. A local attacker with a privileged user account and low complexity attack capabilities may exploit this issue. The potential impact to the system includes confidentiality (high), integrity (low), and availability (none). Subsequent system impacts include no effect on confidentiality, integrity, or availability.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-20614

Affected Products

Intel(R) Cip

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20614 · Security Note
• https://twitter.com/CVEnew/status/1988452633993244811 · Twitter Post
• https://t.me/cveNotify/144089 · Telegram Post