{"id":"CVE-2025-20108","state":"PUBLISHED","title":"Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escala","description":"Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2025-05-13T21:02:18.127Z","updatedAt":"2026-02-26T18:28:16.891Z","severity":{"score":5.4,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Network Adapter Driver installers for Windows 11"],"affected":[{"vendor":"n/a","product":"Intel(R) Network Adapter Driver installers for Windows 11","defaultStatus":"unaffected","versions":[{"version":"before version 29.4","status":"affected"}]}],"references":["https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/20xxx/CVE-2025-20108.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-20108","state":"PUBLISHED","datePublished":"2025-05-13T21:02:18.127Z","dateUpdated":"2026-02-26T18:28:16.891Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2024-11-06T04:00:14.562Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Network Adapter Driver installers for Windows 11","defaultStatus":"unaffected","versions":[{"version":"before version 29.4","status":"affected"}]}],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html","name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"cvssV4_0":{"version":"4.0","baseScore":5.4,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Escalation of Privilege"},{"cweId":"CWE-427","lang":"en","description":"Uncontrolled Search Path Element","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2025-05-13T21:02:18.127Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-20108","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-05-15T04:02:11.965633Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T18:28:16.891Z"}}]}}}