Untrusted search path in Intel products - CVE-2025-20108

Vulnerability identifier: #VU109237

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20108

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.

Intel Network Adapter Driver for Microsoft Windows 11
Administrative Tools for Intel Network Adapters
Intel Ethernet Adapter Complete Driver Pack
Intel Network Windows E810 Device Drivers 26.4.8 (For Windows)
Intel Network Windows E810 Device Drivers 27.2.1.2 (For Windows)
Intel I225 LAN driver for Windows IoT 10 64-bit (version 21H2) , Windows 10 (64-bit), Windows 11 (64-bit) - ThinkEdge SE30
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One MTR
Intel Lan Driver for Windows 10 IoT (64-bit), Windows 11 IoT (64-bit)- ThinkSmart Hub Teams, ThinkSmart Hub Zoom
Intel Gigabit Ethernet Driver for Windows IoT 10 (64-bit) - ThinkSmart Hub Teams
Intel Lan Driver for Windows 11 IoT 64-bit - ThinkSmart Core Gen 2 Series
Intel On-board Lan driver for Windows IoT 10 (64-bit) - ThinkEdge SE50
Intel On-board Lan Driver for Windows 11 IoT 64-bit (24H2) - ThinkEdge SE50
Nano IoT IOBOX LAN Driver for Windows IoT 10 64-bit (version 1809) - ThinkEdge SE30
Intel(R) Ethernet Controller Driver for Windows IoT 10 64-bit (version 1809) - ThinkEdge SE30
Intel Lan Driver for Windows IoT 10 (64-bit) (version 21H2, 22H2) - ThinkSmart One Series
Intel I225 LAN Driver for Windows 11 IoT (64-bit) (For 24H2) - ThinkEdge SE30
Intel Lan Driver for Windows 11 IoT (64-bit) (For 24H2) - ThinkEdge SE10
Intel Ethernet Driver for Windows 10 IoT (64-bit) (For 21H2) - ThinkEdge SE10
Intel Ethernet Driver for Windows 10 IoT (64-bit) (For 2019) - ThinkEdge SE10
Intel LAN Driver for Windows 10 IOT 64-bit - ThinkCentre M90n-1
Intel LAN Driver for Windows 10 IoT (64-bit), Windows IoT 11 (64-bit) - ThinkSmart Series
Intel LAN Driver for Windows 10 64-bit - ThinkCentre M90n-1
Intel v26.4 SW release for Intel Ethernet products (For Unknown OS)
Intel PRO/1000 LAN Adapter Software for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L13, L13 Yoga
Intel v27.1 SW release for Intel Ethernet products (For Unknown OS)
Intel PRO1000 LAN Adapter Software for Windows 10 (Version 21H2 or later) - ThinkPad T14 Gen 5 (Type 21ML, 21MM), T16 Gen 3 (Type 21MN, 21MQ)
Intel PRO1000 LAN Adapter Software for Windows 10 (Version 21H2 or later) - ThinkPad P16v Gen 2 (Type 21KX, 21KY)
Intel Ethernet Driver for Windows 10 (Version 21H2 or later) - ThinkPad P14s Gen 5 (Type 21G2, 21G3), P16s Gen 3 (Type 21KS, 21KT)
Intel PRO/1000 LAN Adapter Software for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L390, L390 Yoga
Intel PRO1000 LAN Adapter Software for Windows 10 (Version 21H2 or later) - ThinkPad L14 Gen 5 (Type 21L1, 21L2), L16 Gen 1 (Type 21L3, 21L4)
Intel PRO/1000 LAN Adapter Software for Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad L14 Gen 3 (Types:21C1, 21C2), L15 Gen 3 (Types:21C3, 21C4)
Intel PRO/1000 LAN Adapter Software for Windows 11 (21H2 or later), 10 (Version 1903 or later) - ThinkPad L13 Gen 2, L13 Yoga Gen 2
Intel PRO/1000 LAN Adapter Software for Windows 10 (Version 1803) - ThinkPad L13, L13 Yoga
Intel PRO1000 LAN Adapter Software for Windows 11 (Version 22H2 or later) - ThinkPad
Intel PRO1000 LAN Adapter Software for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad
Intel Network Windows E810 Device Drivers 27.1.32 (For Windows)
Intel Networking Adapter/Device Windows Driver
Intel Network Windows E810 Device Drivers 26.4.4 (For Windows)
Intel OnBoard Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart Tiny Kit
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One ZOOM
Intel v25.5 SW release for Intel Ethernet products (For Unknown OS)
Intel Ethernet Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad X13 Yoga Gen 1 (Machine type 20SX, 20SY)
ThinkPad L390 20NS
ThinkPad P16s Gen 3 21KS
ThinkPad P16s Gen 2 21HL
ThinkPad P16s Gen 2 21HK
ThinkPad P14s Gen 5 21G3
ThinkPad P14s Gen 5 21G2
ThinkPad P14s Gen 4 21HG
ThinkPad P14s Gen 4 21HF
ThinkPad L390 Yoga 20NU
ThinkPad L390 Yoga 20NT
ThinkPad P16s Gen 3 21KT
ThinkPad L390 20NR
ThinkPad L16 Gen 1 21L4
ThinkPad L16 Gen 1 21L3
ThinkPad L15 Gen 4 21H4
ThinkPad L15 Gen 4 21H3
ThinkPad L15 Gen 3 21C4
ThinkPad L15 Gen 3 21C3
ThinkPad L14 Gen 5 21L2
ThinkPad T16 Gen 2 21HH
ThinkPad X13 Yoga Gen 1 20SY
ThinkPad X13 Yoga Gen 1 20SX
ThinkPad S2 Yoga Gen 6 Type 20VN China Only
ThinkPad S2 Gen 6 Type 20VM China Only
ThinkPad R14 Gen 5 Type 21JM PRC
ThinkPad T16 Gen 3 21MQ
ThinkPad T16 Gen 3 21MN
ThinkPad T16 Gen 2 21HJ
ThinkPad L14 Gen 5 21L1
ThinkPad T14p Gen 2 21KU
ThinkPad T14 Gen 5 21MM
ThinkPad T14 Gen 5 21ML
ThinkPad T14 Gen 4 21HE
ThinkPad T14 Gen 4 21HD
ThinkPad R14 Gen 6 21M9
ThinkPad P16v Gen 2 21KY
ThinkPad P16v Gen 2 21KX
ThinkAgile VX7531 Certified Node
ThinkPad E14 Gen 5 21JL
ThinkPad E14 Gen 5 21JK
ThinkEdge SE455 V3
ThinkEdge SE450
ThinkEdge SE360 V2
ThinkEdge SE350 V2
ThinkAgile VX7820
ThinkAgile VX7575 Integrated System
ThinkPad E14 Gen 6 21M7
ThinkAgile VX7530 Appliance
ThinkAgile VX7520 N
ThinkAgile VX7520
ThinkAgile VX7375-N Integrated System
Thinkagile VX7330 Appliance
ThinkAgile VX7320 N
ThinkAgile VX5530 Appliance
ThinkAgile VX5520
ThinkPad L13 Gen 2 20VJ
ThinkPad L14 Gen 4 21H2
ThinkPad L14 Gen 4 21H1
ThinkPad L14 Gen 3 21C2
ThinkPad L14 Gen 3 21C1
ThinkPad L13 Yoga Gen 2 20VK
ThinkPad L13 Yoga Gen 2 20VL
ThinkPad L13 Yoga 20R6
ThinkPad L13 Yoga 20R5
ThinkServer SR588 V2
ThinkPad L13 Gen 2 20VH
ThinkPad L13 20R4
ThinkPad L13 20R3
ThinkPad E16 Gen 2 21MB
ThinkPad E16 Gen 2 21MA
ThinkPad E16 Gen 1 21JQ
ThinkPad E16 Gen 1 21JN
ThinkPad E14 Gen 6 21M8
ThinkSystem SR850
ThinkSystem SR950 V3
ThinkSystem SR950
ThinkSystem SR860 V3
ThinkSystem SR860 V2
ThinkSystem SR860
ThinkSystem SR850P
ThinkSystem SR850 V3
ThinkSystem SR850 V2
ThinkSystem ST250
ThinkSystem SR675 V3
ThinkSystem SR670 V2
ThinkSystem SR670
ThinkSystem SR665 V3
ThinkSystem SR665
ThinkSystem SR655 V3
ThinkSystem SR655
ThinkSystem SR650 V3
ThinkSystem ST558
WH5900 Appliance
ThinkSystem ST658 V3
ThinkSystem ST658 V2
ThinkSystem ST650 V3
ThinkSystem ST650 V2
ThinkSystem ST58 V3
ThinkSystem ST58 V2
ThinkSystem ST58
ThinkSystem SR650 V2
ThinkSystem ST550
ThinkSystem ST50 V3
ThinkSystem ST50 V2
ThinkSystem ST50
ThinkSystem ST258 V3
ThinkSystem ST258 V2
ThinkSystem ST258
ThinkSystem ST250 V2
ThinkSystem SD535 V3
ThinkSystem SR158
ThinkSystem SR150
ThinkSystem SN850
ThinkSystem SN550
ThinkSystem SE350
ThinkSystem SD650 DWC Dual Node Tray
ThinkSystem SD630 V2
ThinkSystem SD550 V3
ThinkSystem SR250
ThinkSystem SD530 V3
ThinkSystem SD530
ThinkSystem ST250 V3
ThinkServer SR860P
ThinkServer SR668 V2
ThinkServer SR660 V2
ThinkServer SR590/SR588
ThinkServer SR590 V2
ThinkSystem SR590
ThinkSystem SR650
ThinkSystem SR645 V3
ThinkSystem SR645
ThinkSystem SR635 V3
ThinkSystem SR635
ThinkSystem SR630 V3
ThinkSystem SR630 V2
ThinkSystem SR630
ThinkAgile VX3720
ThinkSystem SR570
ThinkSystem SR550
ThinkSystem SR530
ThinkSystem SR258 V3
ThinkSystem SR258 V2
ThinkSystem SR258
ThinkSystem SR250 V3
ThinkSystem SR250 V2
Converged HX7510 Appliance
ThinkSmart Core & IP Controller Kit: Zoom Rooms
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms/Zoom Rooms
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms
ThinkSmart Core & IP Controller Full Room Kit: Zoom Rooms
ThinkSmart Core & IP Controller Full Room Kit: Microsoft Teams Rooms
ThinkEdge SE50
ThinkEdge SE30
ThinkEdge SE10
ThinkCentre M90n-1
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Microsoft Teams Rooms
Converged HX5510-C Appliance
Converged HX5510 Appliance
Converged HX3510-G Appliance
Converged HX3310-F Appliance
Converged HX3310 Nutanix Appliance
Converged HX2310-E Appliance
Converged HX1310 Appliance
Zoom ThinkSmart Core Gen 2 & IP Controller Room Kits - 12WN, 12WQ, 12WE, 12WF MTR
ThinkSmart One & IP Controller: Zoom Rooms
ThinkSmart One & IP Controller: Microsoft Teams Rooms
ThinkSmart Hub Zoom
ThinkSmart Hub Teams
Thinksmart Hub 500
ThinkSmart Core IP Controller Kit & Bar 180
Zoom ThinkSmart Core Gen 2 - 12W6, 12W7 MTR
Zoom ThinkSmart Core Gen 2 & ThinkSmart Controller Room Kits - 12WJ, 12WK, 12WA, 12WB MTR
ThinkSmart Core Device: Zoom Rooms
ThinkSmart Core Device: Basic
ThinkSmart Core Device for Poly
ThinkSmart Core Device for Logitech
ThinkSmart Core Controller Kit & Bar 180
ThinkSmart Core & ThinkSmart Controller Kit: Zoom Rooms
ThinkSmart Core & ThinkSmart Controller Kit: Microsoft Teams Rooms
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Zoom Rooms
ThinkSmart One & ThinkSmart Controller: Microsoft Teams Rooms
ThinkAgile MX3531 H Hybrid Certified node
ThinkAgile MX Certified Node – Hybrid
ThinkAgile MX Certified Node – All Flash
ThinkAgile MX650 v3 Integrated System
ThinkAgile MX650 V3 Certified Node
ThinkAgile MX630 V3 Integrated System
ThinkAgile MX630 V3 Certified Node
ThinkAgile MX450 Edge IS
ThinkAgile MX3531-F All-flash Certified node
ThinkAgile MX1021 on SE350
ThinkAgile MX3530-H Hybrid Appliance
ThinkAgile MX3530 F All flash Appliance
ThinkAgile MX3520 H Appliance - Hybrid
ThinkAgile MX3520 F Appliance - All flash
ThinkAgile MX3331-H Hybrid Certified node
ThinkAgile MX3331-F All-flash Certified node
ThinkAgile MX3330-H Hybrid Appliance
ThinkAgile MX3330-F All-flash Appliance
ThinkAgile VX2330 Appliance
ThinkAgile VX3575-G Integrated System
ThinkAgile VX3530-G Appliance
ThinkAgile VX3520-G
ThinkAgile VX3376 Certified Node
ThinkAgile VX3375 Integrated System
ThinkAgile VX3330 Appliance
ThinkAgile VX3320
ThinkAgile VX2375 Integrated System
ThinkAgile MX Edge Appliance - MX1020
ThinkAgile VX2320
ThinkAgile VX1320
ThinkAgile VX Enclosure
ThinkAgile VX 4U Certified Node
ThinkAgile VX 2U4N Certified Node
ThinkAgile VX 2U Certified Node
ThinkAgile VX 1U Certified Node
ThinkAgile VX 1SE Certified Node
System x3850 X6
ThinkAgile HX2320-E Appliance
ThinkAgile HX2320 Appliance
ThinkAgile HX1521-R Certified Node
ThinkAgile HX1520-R Appliance
ThinkAgile HX1321 Certified Node
ThinkAgile HX1320 Appliance
ThinkAgile VX3331 Certified Node
System x3950 X6
ThinkAgile HX2321 Certified Node
System x3750 M4
System x3650 M5
System x3550 M5
System x3500 M5
System x3250 M6
NeXtScale Compute Node - nx360 M5
ThinkSmart Kit
ThinkSmart One & ThinkSmart Controller: Zoom Rooms
ThinkAgile HX5520-C Appliance
ThinkAgile MX 1U - MX3321 H
ThinkAgile MX 1U - MX3321 F
ThinkAgile HX7821 Certified Node
ThinkAgile HX7820 Appliance
ThinkAgile HX7521 Certified Node
ThinkAgile HX7520 Appliance
ThinkAgile HX5521-C Certified Node
ThinkAgile HX5521 Certified Node
ThinkAgile HX5520 Appliance
ThinkAgile HX3721 Certified Node
ThinkAgile HX3720 Appliance
ThinkAgile HX3521-G Certified Node
ThinkAgile HX3520-G Appliance
ThinkAgile HX3321 Certified Node
ThinkAgile HX3320 Appliance
ThinkAgile HX2720-E Appliance

Install updates from vendor's website.

Intel Network Adapter Driver for Microsoft Windows 11 - update to 29.4
Administrative Tools for Intel Network Adapters - update to 29.4
Intel Ethernet Adapter Complete Driver Pack - update to 29.4
Intel Ethernet Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad X13 Yoga Gen 1 (Machine type 20SX, 20SY) - update to 12.19.2.60

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html

• Privilege escalation in Intel Ethernet Network Adapter software
• Lenovo update for Intel Ethernet Network Adapter