External Control of File Name in Intel CIP Software

CVE-2025-20614

What is CVE-2025-20614?

A vulnerability exists in Intel's CIP software that allows external control of file names or paths within certain user applications. This flaw enables unprivileged software adversaries to exploit privileges of a legitimate user, leading to potential privilege escalation. The attack can be executed locally without requiring intricate internal knowledge or interaction from the user, making it particularly dangerous. Users of the affected versions should assess their systems for potential exposure, ensuring that appropriate security measures are in place to mitigate risks associated with this vulnerability.

References