CVE-2025-24840

CVSS 2.3 LOWEPSS 0.1%CWE-284

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 2.3EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 ago 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Productos afectados

n/a · Edge Orchestrator software

Referencias

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html