PT-2025-46393 · Intel · Intel(R) Cip

Published 2025-11-11 · Updated 2025-11-12 · CVE-2025-24838

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description The software contains an improper privilege management issue within Ring 3 User Applications. An unprivileged software adversary with an authenticated user and a low complexity attack may escalate privileges. This can potentially occur via network access without special internal knowledge or user interaction. The issue may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-24838

Affected Products

Intel(R) Cip

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24838 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24838 · Vendor Advisory
• https://twitter.com/CveTodo/status/1988305398374285403 · Twitter Post
• https://twitter.com/CveFindCom/status/1988331696278642807 · Twitter Post
• https://twitter.com/CVEnew/status/1988452621720711472 · Twitter Post