CVE-2025-24314
BaseFortify
Publication date: 2025-11-11
Last updated on: 2025-11-26
Assigner: Intel Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | computing_improvement_program | to 2.4.11001 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in certain Intel(R) CIP software versions before WIN_DCA_2.4.0.11001. It occurs within Ring 3 (User Applications) and may allow an unprivileged software adversary, combined with a privileged user and a high complexity attack, to disclose information. The attack can potentially happen via network access without special internal knowledge and requires no user interaction.
How can this vulnerability impact me? :
The vulnerability may lead to information disclosure, impacting the confidentiality of the system at a low level. It does not affect the integrity or availability of the system. The overall impact is limited to potential data exposure under specific conditions involving privileged users and complex attacks.