Dashboard / CVE-2025-24840

CVE-2025-24840

LOW
INFO Priority: 0.00 BB Relevance: 40/100
Published: 2025-08-12 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Adjacent No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: None
AT: Present
VC: Low
VI: Low
VA: Low

Description

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
n/a Edge Orchestrator software before version 24.11.1 for Intel® Tiber™ Edge Platform

References & Advisories (1)

Bug Bounty Relevance

40 / 100
✓ No authentication
✓ No user interaction

CVSS Score

2.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.18%
Raw Score 0.001840
Percentile 8.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00184
2026-11-13
0.00184
2026-11-12
0.00171
2026-11-10
0.00171
2026-11-09
0.00171
2026-11-08
0.00171
2026-11-07
0.00171
2026-11-06
0.00171
2026-11-05
0.00171
2026-11-04
0.00171
2026-11-03
0.00171

Intelligence Sources

mitre ref →

External Links