Insecure Inherited Permissions in Intel Rapid Storage Technology - CVE-2025-24327

Vulnerability identifier: #VU118867

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-24327

CWE-ID: CWE-277

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code on the system.

The vulnerability exists due to insecure inherited permissions. A local user can execute arbitrary code on the target system.

Intel Rapid Storage Technology
Intel Rapid Storage Technology Driver for Windows 10 (Version 1709, 1803 and 1809 or later) - ThinkCentre M90n-1
Intel(R) Rapid Storage Technology Driver for Windows 10 (Version 1809 or later) - ThinkPad L390 (20NR, 20NS), L390 Yoga (20NT, 20NU)
Intel Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad L14 Gen 1, L15 Gen 1
Intel(R) Rapid Storage Technology Driver for Windows 11 (Version 21H2 or later), 10 (Version 1803 or later) - ThinkPad L13, L13 Yoga
Intel Rapid Storage Technology for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16 Gen 2 (Type 21FA, 21FB)
Intel RST Driver for Windows 10 64-bit (version 21h1) - ThinkEdge SE30
Intel RST Driver for Windows 10 IoT (64-bit) Windows 11 IoT 64bit (24h2) - ThinkEdge SE30
Intel RST Driver for Windows 11 IoT (64-bit) (For 24H2) - ThinkEdge SE30
Intel RST Driver for Windows IoT 10 64-bit (version 21H2) - ThinkEdge SE30
ThinkPad L15 20U3
ThinkPad P16 Gen 2 21FB
ThinkPad P16 Gen 2 21FA
ThinkPad L590 20Q8
ThinkPad L590 20Q7
ThinkPad L490 20Q6
ThinkPad L490 20Q5
ThinkPad L390 Yoga 20NU
ThinkPad L390 Yoga 20NT
ThinkPad L390 20NS
ThinkPad L390 20NR
ThinkPad L15 20U4
ThinkPad L14 20U2
ThinkPad L14 20U1
ThinkPad L13 Yoga 20R6
ThinkPad L13 Yoga 20R5
ThinkPad L13 20R4
ThinkPad L13 20R3
ThinkEdge SE30
ThinkCentre M90n-1

Install updates from vendor's website.

Intel Rapid Storage Technology - addressed in versions 18.1.1042, 20.0.1021
Intel Rapid Storage Technology for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16 Gen 2 (Type 21FA, 21FB) - update to 20.0.0.1038
Intel RST Driver for Windows 10 64-bit (version 21h1) - ThinkEdge SE30 - update to 20.2.1.1016
Intel RST Driver for Windows 10 IoT (64-bit) Windows 11 IoT 64bit (24h2) - ThinkEdge SE30 - update to 20.2.1.1016
Intel RST Driver for Windows 11 IoT (64-bit) (For 24H2) - ThinkEdge SE30 - update to 20.2.1.1016
Intel RST Driver for Windows IoT 10 64-bit (version 21H2) - ThinkEdge SE30 - update to 20.2.1.1016

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01362.html

• Insecure Inherited Permissions in Intel Rapid Storage Technology
• Lenovo update for Intel Rapid Storage Technology software