Improper access control in Intel Rapid Storage Technology - CVE-2025-20099

Vulnerability identifier: #VU114210

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20099

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privilege on the target system.

Intel Rapid Storage Technology
Intel RST Driver for Windows 10 64-bit (version 21h1) - ThinkEdge SE30
Intel RST Driver for Windows 10 IoT (64-bit) Windows 11 IoT 64bit (24h2) - ThinkEdge SE30
Intel RST Driver for Windows 11 IoT (64-bit) (For 24H2) - ThinkEdge SE30
Intel RST Driver for Windows IoT 10 64-bit (version 21H2) - ThinkEdge SE30
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later) and 10 (Version 1903 or later) - ThinkPad E14, E15
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later), 10 (Version 1709 or later) - ThinkPad
Intel(R) Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later), 10 (Version 1803 or later) - ThinkPad L13, L13 Yoga
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L14 Gen 1, L15 Gen 1
Intel(R) Rapid Storage Technology Driver for Windows 10 (Version 1809 or later) - ThinkPad L390 (20NR, 20NS), L390 Yoga (20NT, 20NU)
Intel Rapid Storage Technology for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16 Gen 2 (Type 21FA, 21FB)
Intel Rapid Storage Technology for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FC, 21FD)
Intel Rapid Storage Technology Driver for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad P16v Gen 2 (Type 21KX, 21KY)
Intel Rapid Storage Technology Driver for Windows 10 (Version 1709, 1803 and 1809 or later) - ThinkCentre M90n-1
Intel Rapid Storage Technology Driver for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P3 Ultra
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2, 22H2 or later), 10 (Version 21H2, 22H2 or later) - ThinkStation P360 Ultra
ThinkPad L580 20LW
ThinkPad L14 20U1
ThinkPad L14 20U2
ThinkPad L15 20U3
ThinkPad L15 20U4
ThinkPad L390 20NR
ThinkPad L390 20NS
ThinkPad L390 Yoga 20NT
ThinkPad L390 Yoga 20NU
ThinkPad L480 20LS
ThinkPad L480 20LT
ThinkPad L490 20Q5
ThinkPad L490 20Q6
ThinkPad L13 Yoga 20R6
ThinkPad L580 20LX
ThinkPad L590 20Q7
ThinkPad L590 20Q8
ThinkPad P16 Gen 2 21FA
ThinkPad P16 Gen 2 21FB
ThinkPad P16v Gen 1 21FC
ThinkPad P16v Gen 1 21FD
ThinkPad P16v Gen 2 21KX
ThinkPad P16v Gen 2 21KY
ThinkPad S3 2nd Gen 20RG China only
ThinkStation P3 Ultra Workstation
ThinkStation P360 Ultra Workstation
ThinkCentre M90n-1
ThinkEdge SE30
ThinkPad E14 20RA
ThinkPad E14 20RB
ThinkPad E15 20RD
ThinkPad E15 20RE
ThinkPad E480 20KN
ThinkPad E480 20KQ
ThinkPad E580 20KS
ThinkPad E580 20KT
ThinkPad L13 20R3
ThinkPad L13 20R4
ThinkPad L13 Yoga 20R5

Install updates from vendor's website.

Intel Rapid Storage Technology - addressed in versions 19.5.8.1059, 20.2.1.1016
Intel Rapid Storage Technology Driver for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P3 Ultra - update to 20.2.1.1016
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2, 22H2 or later), 10 (Version 21H2, 22H2 or later) - ThinkStation P360 Ultra - update to 20.2.1.1016

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01298.html

• Privilege escalation in Intel Rapid Storage Technology
• Lenovo update for Intel Rapid Storage Technology software