Intel CIP Software Privilege Escalation Vulnerability

A vulnerability allowing external control of file names or paths has been identified in some Intel CIP software versions prior to WIN_DCA_2.4.0.11001, within Ring 3: User Applications. This vulnerability may lead to unauthorized privilege escalation. An unprivileged adversary with access to a privileged user can exploit this issue through a low-complexity attack, potentially via local access, without special internal knowledge or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the system.

Remediation

Users are advised to update Intel CIP software to version WIN_DCA_2.4.0.11001 or later. The update is available for download from the Intel Download Center.