🔐 CVE Alert

CVE-2025-24840

MEDIUM 5.8
CVSS Score
5.8
EPSS Score
0.0%
EPSS Percentile
0th

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CWE CWE-284
Vendor n/a
Product edge orchestrator software
Published Aug 12, 2025
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for n/a edge orchestrator software

Be the first to know when new medium vulnerabilities affecting n/a edge orchestrator software are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low

Affected Versions

n/a / Edge Orchestrator software
before version 24.11.1 for Intel® Tiber™ Edge Platform

References

NVD ↗ CVE.org ↗ EPSS Data ↗
intel.com: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html