Intel CIP Software Improper Access Control Vulnerability Allowing Information Disclosure

A vulnerability exists in some Intel CIP software prior to version WIN_DCA_2.4.0.11001, specifically within Ring 3: User Applications. This vulnerability involves improper access control that may lead to unauthorized information disclosure. An unprivileged software adversary with a privileged user can exploit this issue, potentially allowing data exposure. The vulnerability may be triggered through adjacent access, without special internal knowledge, and requires no user interaction. The impact of this vulnerability is high on confidentiality, with no effects on integrity or availability.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, allowing sensitive data to be exposed.

Remediation

Users are advised to update Intel CIP software to version WIN_DCA_2.4.0.11001 or later. The update is available for download from the Intel Download Center.