Unrestricted File Upload Vulnerability in Intel CIP Software

CVE-2025-24862

What is CVE-2025-24862?

An unrestricted file upload vulnerability exists in Intel(R) CIP software prior to version WIN_DCA_2.4.0.11001. This vulnerability could allow an adversary with unprivileged software access to potentially escalate privileges through the manipulation of data. Such an attack may require a high level of complexity and depend on specific internal knowledge while necessitating passive user interaction, which could be executed over a network. While the vulnerability does not directly affect confidentiality and availability, it poses risks to the integrity of the system. Consequently, exploitation of this vulnerability might have downstream impacts on system integrity.

References