Improper Privilege Management in Intel CIP Software
CVE-2025-24307

2.3LOW

Key Information:

Vendor

Intel
Status
Intel(r) Cip Software
Vendor
CVE Published:
11 November 2025

What is CVE-2025-24307?

The vulnerability in Intel's CIP software allows unprivileged adversaries to escalate privileges through a complex attack. This may result in unauthorized data manipulation without requiring specific internal knowledge or user interaction. Network access enables the attack, potentially compromising the integrity of the vulnerable system. While the confidentiality and availability remain unaffected, the integrity risks must be mitigated to protect sensitive information and maintain system trust.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) CIP software before version WIN_DCA_2.4.0.11001

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.