Improper Access Control in Intel CIP Software

CVE-2025-24516

What is CVE-2025-24516?

An improper access control issue exists in Intel's CIP software versions prior to WIN_DCA_2.4.0.11001, which may lead to information disclosure. An adversary with unprivileged software leveraging a privileged user account can exploit this vulnerability using a low complexity attack scenario. The attack may not require special internal knowledge or user interaction, allowing adjacent access to sensitive data. While this vulnerability may expose confidential information, it does not impact system integrity or availability.

References