PT-2025-46397 · Intel · Intel(R) Cip

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-24862

Positive Technologies (AI Summary)

CVSS v3.1

2.0

Low

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combined with a privileged user and a high complexity attack, to manipulate data. The issue requires network access, special internal knowledge, and passive user interaction. The potential impact includes low integrity.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-24862

Affected Products

Intel(R) Cip

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24862 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24862 · Vendor Advisory
• https://twitter.com/CVEnew/status/1988303483804807419 · Twitter Post