Improper Privilege Management in Intel CIP Software
CVE-2025-24863

6MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
11 November 2025

What is CVE-2025-24863?

The vulnerability in Intel CIP Software arises from improper privilege management within User Applications, allowing a potential information disclosure. An attacker with valid authentication, using unprivileged software and a low complexity attack, could exploit this vulnerability to access sensitive data over a network. The exploitation of this flaw requires no special internal knowledge or user interaction, making it particularly concerning for system confidentiality.

Affected Version(s)

Intel(R) CIP software before version WIN_DCA_2.4.0.11001

References

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.