Improper Privilege Management in Intel CIP Software

CVE-2025-24838

What is CVE-2025-24838?

Intel's CIP software prior to version WIN_DCA_2.4.0.11001 is susceptible to a vulnerability that allows an attacker to escalate privileges by exploiting improper privilege management. This flaw can be exploited by unprivileged software adversaries who possess authenticated user access, enabling them to launch a low-complexity attack potentially via network access. The attack does not require special internal knowledge or user interaction, which raises significant security concerns regarding the confidentiality, integrity, and availability of affected systems.

References