PT-2024-3895 · Intel · Intel Neural Compressor
Published
2024-05-16
·
Updated
2024-11-02
·
CVE-2024-22476
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Intel Neural Compressor versions prior to 2.5.0
Description:
The issue is related to improper input validation in the Intel Neural Compressor software, which may allow an unauthenticated user to potentially enable escalation of privilege via remote access. This could be exploited by an attacker to gain elevated privileges. The vulnerability is associated with errors in processing input data.
Recommendations:
For versions prior to 2.5.0, update to version 2.5.0 or later to mitigate the issue. As a temporary workaround, consider restricting access to the vulnerable software until a patch is applied. Avoid using the software for remote access until the issue is resolved.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Neural Compressor