CVE-2025-20017_CVE-2025-20017

6.7 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access.

Basic Information

ID CVE-2025-20017

Source intel

Published Aug 12, 2025 at 16:57

Modified Aug 13, 2025 at 15:04

Affected Product

Vendor n/a

Product Intel(R) oneAPI Toolkit and component software installers

Version See references

Affected Versions n/a Intel(R) oneAPI Toolkit and component software installers See references

CWE Classification

CWE-427

References

intel.com /content/www/us/en/security-center/advisory/intel-sa-01285.html

{
    "lastseen": "",
    "description": "Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access.",
    "published": "2025-08-12T16:57:51.242Z",
    "modified": "2025-08-13T15:04:15.323Z",
    "type": "cve",
    "title": "CVE-2025-20017",
    "source": "intel",
    "references": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html",
    "id": "CVE-2025-20017",
    "bulletinFamily": "",
    "cwe": [
        "CWE-427"
    ],
    "cvelist": null,
    "sourceData": "n/a Intel(R) oneAPI Toolkit and component software installers See references",
    "sourceHref": "",
    "cvss": {
        "score": 6.7,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Intel(R) oneAPI Toolkit and component software installers",
    "version": "See references",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}