CVE-2023-43489

CVE-2023-43489 affects Intel® CIP software prior to version 2.4.10717. The root cause is an improper access control that may allow an authenticated local user to potentially cause a denial of service . The issue is documented with CVSS metrics (3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; 4.0: AV:L/...

CVE-2020-12308

CVE-2020-12308 affects Intel Computing Improvement Program before version 2.4.5982. The root cause is improper access control, potentially allowing an unprivileged user to disclose information via network access. The NVIDIA? (no) is not relevant. The advisory and multiple CNA sources corroborate ...

CVE-2025-20614

CVE-2025-20614 concerns Intel’s CIP software prior to WIN_DCA_2.4.0.11001, where external control of a file name or path in Ring 3 user applications may enable privilege escalation. The description across connected sources states an unprivileged software adversary with a privileged user and a low...

CVE-2025-24863

Intel CIP software prior to WIN_DCA_2.4.0.11001 is affected by CVE-2025-24863, an improper privilege management flaw that may allow information disclosure. The issue occurs in Ring 3: User Applications and can be triggered by an unauthenticated/unprivileged adversary with a valid user account and...

CVE-2025-20050

Intel CIP software prior to WIN_DCA_2.4.0.11001 is affected by an Uncontrolled search path issue in Ring 3 User Applications that can lead to privilege escalation and local code execution. The vulnerability arises from improper/unsafe path handling, enabling an unprivileged, authenticated user wi...

CVE-2025-24848

Intel CIP software prior to WIN_DCA_2.4.0.11001 suffers a protection mechanism failure in Ring 3 (User Applications) that may allow an Elevation of Privilege by a local attacker with privileged user context and high attack complexity. Affected products are Intel® CIP software before WIN_DCA_2.4.0...

CVE-2025-24834

Intel CIP software prior to WIN_DCA_2.4.0.11001 contains a protection mechanism failure in Ring 3: User Applications, which may allow information disclosure. An unprivileged, unauthenticated user with low-complexity attack could exposure data via adjacent access. Affected products: Intel CIP soft...