CVE-2025-30506
BaseFortify
Publication date: 2025-11-11
Last updated on: 2025-11-11
Assigner: Intel Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | driver_and_support_assistant | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an uncontrolled search path issue in some versions of the Intel Driver and Support Assistant before version 25.2. It exists within Ring 3 (user applications) and may allow an escalation of privilege. An unprivileged, authenticated user could potentially execute local code by exploiting this vulnerability, but it requires a high complexity attack and active user interaction. The vulnerability impacts confidentiality, integrity, and availability of the system at a high level.
How can this vulnerability impact me? :
This vulnerability can lead to escalation of privilege, allowing an attacker with local access and an authenticated user account to execute code locally. This can compromise the confidentiality, integrity, and availability of the affected system, potentially leading to unauthorized access, data modification, or disruption of system operations.