Privilege Escalation Vulnerability in Intel CIP Software

CVE-2025-20050

What is CVE-2025-20050?

A privilege escalation vulnerability exists in Intel CIP software prior to version WIN_DCA_2.4.0.11001. This weakness arises from an uncontrolled search path, which can be exploited by an authenticated adversary with unprivileged software. Successfully leveraging this vulnerability requires a complex attack and user interaction, allowing potential local code execution. The implications may affect the system's confidentiality, integrity, and availability, making it crucial for users to upgrade to the latest version and fortify their security measures.

References