---
id: CVE-2025-24840
title: >-
  Improper access control for some Edge Orchestrator software before version
  24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user
  to potentially enable escalation of privilege via adjacent access.
summary: >-
  Improper access control for some Edge Orchestrator software before version
  24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user
  to potentially enable escalation of privilege via adjacent access.
severity: medium
cvss: 5.8
cvssVector: 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-284
product: Edge Orchestrator software
affected:
  - >-
    edge_orchestrator_software before version 24.11.1 for Intel® Tiber™ Edge
    Platform
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-08-14T03:55:24.663218Z'
published: '2025-08-12'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:02:56.483Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-24840'
references:
  - url: >-
      https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
    label: >-
      https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
tags:
  - cve.org
epss: 0.00171
epssPercentile: 0.06515
ingestedAt: '2026-11-05T20:33:06.544Z'
---

## Overview

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

## Affected

- `edge_orchestrator_software before version 24.11.1 for Intel® Tiber™ Edge Platform`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.