Intel CIP Software Improper Access Control Vulnerability Allowing Information Disclosure

A vulnerability exists in some Intel CIP software prior to version WIN_DCA_2.4.0.11001, within Ring 3: User Applications, that may lead to unauthorized information disclosure. This vulnerability arises from improper access control, allowing an unprivileged software adversary with a privileged user to expose data. The issue could potentially be exploited through network access, without requiring special internal knowledge or user interaction, provided that certain attack conditions are met. The vulnerability is assessed to have a low impact on confidentiality, with no impact on integrity or availability.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, allowing sensitive data to be exposed.

Remediation

Users are advised to update Intel CIP software to version WIN_DCA_2.4.0.11001 or later. The update is available for download from the Intel Download Center.