← Vulnerability feed

Vulnerability record · CVE-2020-12308 · published 12 November 2020

CVE-2020-12308: Intel computing improvement program vulnerability

Intel · Computing Improvement Program

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

6.5 CVSS 3.1 Medium EPSS 0.87% · top 42.7%
6.5CVSS 3.1 base score, v2 4.0
0.87%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410 Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410 Vendor Advisory

Track CVE-2020-12308 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.7CVE-2025-24299Intel computing improvement program improper input validation vulnerabilityImproper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation …EPSS 0.32%7.8CVE-2023-35769Intel computing improvement program uncontrolled search path element vulnerabilityUncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of p…EPSS 0.19%7.8CVE-2021-0052Intel computing improvement program improper privilege management vulnerabilityIncorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially ena…EPSS 0.22%7.8CVE-2021-0074Intel computing improvement program vulnerabilityImproper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticated user…EPSS 0.22%7.8CVE-2020-8736Intel computing improvement program vulnerabilityImproper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user to potent…EPSS 0.33%7.8CVE-2019-11162Intel computing improvement program vulnerabilityInsufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an…EPSS 0.38%7.8CVE-2018-12168Intel computing improvement program incorrect permission assignment vulnerabilityPrivilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potenti…EPSS 0.35%7.7CVE-2025-24838Intel computing improvement program improper privilege management vulnerabilityImproper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalat…EPSS 0.28%

Source: NIST National Vulnerability Database (record CVE-2020-12308), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.