CVE-2024-22476

CVSS 10 CRITICALEPSS 33.4%CWE-20

Vexday Risk Score

55Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 10EPSS 33.4%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

16 May 2024Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

n/a · Intel(R) Neural Compressor software

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html