CVE-2025-24921

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-249228.8A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and De CVE-2025-249236.7Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to poten CVE-2025-249249.8Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username CVE-2025-249255.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-249287.7libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD va CVE-2025-24937.5Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter CVE-2025-249345.4Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems. However, due to its CVE-2025-249369.0The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component CVE-2025-249379.0File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading t CVE-2025-249388.4The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high pri CVE-2025-24949.8Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server v CVE-2025-249465.3The hash table used to manage connections in picoquic before b80fd3f uses a weak hash function, allowing remote attackers to cause a conside