PT-2025-46386 · Intel · Intel(R) Cip

Published 2025-11-11 · Updated 2025-11-12 · CVE-2025-24314

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description An improper access control issue exists in some Intel(R) CIP software. This may allow an information disclosure when running within Ring 3 User Applications. An unprivileged software adversary, combined with a privileged user and a high complexity attack, could potentially expose data. This could occur via network access without requiring special internal knowledge or user interaction. The issue may impact the confidentiality of the vulnerable system.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-24314

Affected Products

Intel(R) Cip

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24314 · Security Note
• https://twitter.com/CVEnew/status/1988452628691640451 · Twitter Post