Untrusted search path in Intel products - CVE-2025-20108
Published: May 15, 2025
Vulnerability identifier: #VU109237
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-20108
CWE-ID: CWE-426
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Intel
Affected software:
Intel Network Adapter Driver for Microsoft Windows 11
Administrative Tools for Intel Network Adapters
Intel Ethernet Adapter Complete Driver Pack
Intel Network Adapter Driver for Microsoft Windows 11
Administrative Tools for Intel Network Adapters
Intel Ethernet Adapter Complete Driver Pack
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.
How to mitigate CVE-2025-20108
Install updates from vendor's website.