PT-2024-8841 · Intel · Intel Distribution Of Openvino Model Server

Published 2024-11-12 · Updated 2024-11-15 · CVE-2024-32048

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) Distribution of OpenVINO(TM) Model Server versions prior to 2024.0

Description: The issue is related to improper input validation in the software, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This could be exploited by an attacker to cause a disruption in service.

Recommendations: For versions prior to 2024.0, update to version 2024.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the software to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-10477

CVE-2024-32048

Affected Products

Intel Distribution Of Openvino Model Server

References · 4

• https://bdu.fstec.ru/vul/2024-10477 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-32048 · Security Note
• https://twitter.com/CVEnew/status/1856808208045691321 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01158.html · Note