Intel CIP Software Information Disclosure Vulnerability

A vulnerability allowing information disclosure exists in some Intel CIP software versions prior to WIN_DCA_2.4.0.11001. This issue arises from a protection mechanism failure within Ring 3: User Applications. An unprivileged software adversary, with an unauthenticated user, could exploit this vulnerability through adjacent access, under certain conditions, and without special internal knowledge or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized data exposure.

Remediation

Users are advised to update Intel CIP software to version WIN_DCA_2.4.0.11001 or later. The update is available for download from the Intel Download Center.