Intel CIP Software Privilege Escalation Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in some Intel CIP software versions prior to WIN_DCA_2.4.0.11001. This vulnerability may lead to unauthorized privilege escalation. An unprivileged adversary, with access to a privileged user, could exploit this issue through a complex attack, potentially involving network access and passive user interaction. The vulnerability could allow manipulation of data, with a low impact on system integrity.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the application or system.

Remediation

Users are advised to update Intel CIP software to version WIN_DCA_2.4.0.11001 or later. The update is available for download from the Intel Download Center.