CVE-2025-24314: Low severity Intel CIP software vulnerability
Improper access control for some Intel(R) CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) CIP softwareto a version that resolves this vulnerability.Fixed in WIN_DCA_2.4.0.11001
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24314?
CVE-2025-24314 is classified as a moderate severity vulnerability due to potential information disclosure risks.
How do I fix CVE-2025-24314?
To fix CVE-2025-24314, upgrade the Intel CIP software to version WIN_DCA_2.4.0.11001 or later.
What types of systems are affected by CVE-2025-24314?
CVE-2025-24314 affects Intel CIP software versions prior to WIN_DCA_2.4.0.11001.
What risks are associated with CVE-2025-24314?
CVE-2025-24314 may allow unprivileged software adversaries to access sensitive information through improper access control.
What actions should be taken if CVE-2025-24314 is detected?
If CVE-2025-24314 is detected, immediate measures should be taken to update the software to mitigate information disclosure risks.