Skip to content
Sign in
5.8 Medium

CVE-2025-24840 Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge…

Description

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS 3.1 detail

Vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Exploitable from the adjacent network, without an account and without any user action; the impact on data or service is limited.

Attack vector
Adjacent network
Attack complexity
High
Privileges required
None
Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
Edge Orchestrator software Versions not published

Other CVEs of Edge Orchestrator software

The 8 CVEs of Edge Orchestrator software →
CVE-2025-27707 Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1… 2.6 Low CVE-2025-27576 Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge… 2.9 Low CVE-2025-27537 Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge… 5.5 Medium CVE-2025-27250 Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge… 3.5 Low
Track this CVE