Improper access control in Intel Vision software allows an unauthenticated attacker to run arbitrary code and potentially cause a denial of service. The flaw can let unprivileged software exploit the system from any location, impacting confidentiality as high and integrity and availability as low. The attack does not require special internal knowledge or user interaction, making it a straightforward remote exploit.

Intel Vision software, all versions that operate in Ring 3, is impacted. No specific version numbers are listed, so all released builds should be considered vulnerable.

The CVSS score of 8.8 classifies the vulnerability as high severity. EPSS data is unavailable, but the exploitability is inferred to be low complexity and remote, reachable over the network. The vulnerability is not listed in CISA's KEV catalog. The likely attack vector is network access, and operators face significant risk if the software is exposed to untrusted networks.