Paper/Archive/CVE-2024-22476

CVE-2024-22476

intel neural_compressor_software — Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potential…

EPSS 36%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 98.5.985 × 2019.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

Affected

ProductAffectedFixed inSource

Intel(R) Neural Compressor softwarebefore version 2.5.0–CNA

neural_compressor_software- – < 2.5.02.5.0CISA-ADP

Scores by source

intel (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html