CVE-2025-24314

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-24314

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24314.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-24314

Published

2025-11-11T17:15:41.880Z

Modified

2026-03-12T20:05:23.458701Z

Severity

4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Improper access control for some Intel(R) CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24314.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.4.11001"
            }
        ]
    }
]