PT-2025-46398 · Intel · Intel Cip

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-24863

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) CIP software versions prior to WIN DCA 2.4.0.11001

Description An improper privilege management issue exists in some Intel(R) CIP software. This may allow an information disclosure within Ring 3 User Applications. An unprivileged software adversary with an authenticated user and a low complexity attack may enable data exposure. This could potentially occur via network access without special internal knowledge or user interaction. The issue may impact the confidentiality of the vulnerable system.

Recommendations Update to version WIN DCA 2.4.0.11001 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-24863

Affected Products

Intel Cip

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24863 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24863 · Vendor Advisory
• https://twitter.com/CVEnew/status/1988303482894643260 · Twitter Post