Vulnerability in Administrative Tools For Some Intel(r) Network Adapters Package

CVE-2025-20104

Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vulnerability class: Race Condition

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.001 (2.6th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 3rd percentile — 2.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2025-20104: held from 0.001 to 0.001.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: +0.000

Affected products

  • Administrative Tools For Some Intel(r) Network Adapters Package — versions before version 29.4

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-20104?
CVE-2025-20104 is a high-severity vulnerability in Administrative Tools For Some Intel(r) Network Adapters Package, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.3/10. Published 2025-05-13.
How severe is CVE-2025-20104?
High severity. CVSS v3 base score is 7.3 out of 10.