Arbitrary file upload in Intel Computing_improvement_program
CVE-2025-24862
Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user…
Vulnerability class: Unrestricted File Upload
EPSS: 0.002 (7.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.0 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Intel Computing_improvement_program
- N/a Intel(r) Cip Software — versions before version WIN_DCA_2.4.0.11001
Weakness classification (CWE)
References
- secure@intel.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-24862?
- CVE-2025-24862 is a low-severity vulnerability in Intel Computing_improvement_program, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 2.0/10. Published 2025-11-11.
- How severe is CVE-2025-24862?
- Low severity. CVSS v3 base score is 2.0 out of 10.