Detections
Analytics

Intel Trace Analyzer and Collector Privilege Escalation (INTEL-SA-01266)

medium Nessus Plugin ID 261760

Language:

Synopsis

A software performance profiler application installed on the remote Windows host is affected by a privilege escalation vulnerability.

Description

Intel Trace Analyzer and Collector is installed on the remote Windows host. It is, therefore, affected by an escalation of privilege vulnerability:

 - Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel Trace Analyzer and Collector software. (CVE-2025-20048)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Uninstall Intel Trace Analyzer and Collector.

See Also

http://www.nessus.org/u?1db7d33c

Plugin Details

Severity: Medium

ID: 261760

File Name: intel_trace_analyzer_and_collector_sa-01266.nasl

Version: 1.1

Type: local

Agent: windows

Family: Windows

Published: 9/9/2025

Updated: 9/9/2025

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-20048

CVSS v3

Risk Factor: Medium

Base Score: 6.7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v4

Risk Factor: Medium

Base Score: 5.4

Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/a:intel:trace_analyzer_and_collector

Required KB Items: SMB/Registry/Enumerated, installed_sw/Intel Trace Analyzer and Collector

Vulnerability Publication Date: 8/12/2025

Reference Information

CVE: CVE-2025-20048

IAVA: 2025-A-0588