Protection Mechanism Failure in Intel Computing Improvement Program (CIP) - CVE-2025-24834
Published: November 21, 2025
Vulnerability identifier: #VU118678
CSH Severity: Low
CVSS v4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-24834
CWE-ID: CWE-693
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures. A remote attacker on the local network can bypass implemented security restrictions and gain access to sensitive information on the system.
Affected software
Intel Computing Improvement Program (CIP)
How to mitigate CVE-2025-24834
Install updates from vendor's website.
Intel Computing Improvement Program (CIP) - update to WIN_DCA_2.4.0.11001