Information Disclosure in Intel CIP Software for Windows User Applications

CVE-2025-24847

What is CVE-2025-24847?

Some versions of Intel's CIP software for Windows contain an improper input validation vulnerability that may expose sensitive information. This weakness can be exploited by an unprivileged adversary leveraging a privileged user, allowing potential data exposure through low complexity attacks. The threat is present via network access when specific attack conditions are met, requiring passive interaction from the user. While the integrity and availability of the system remain unaffected, this vulnerability raises significant concerns regarding system confidentiality.

References