CVE-2024-22476

CRITICAL

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

Affects 0 products across 1 vendor.

CVSS 3.110.0
EPSS36.0%
Percentile98th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-20: Improper Input Validation

Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.

Related Attack Patterns (CAPEC)
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
via CWE-20
CAPEC-7 Blind SQL Injection
via CWE-20
CAPEC-8 Buffer Overflow in an API Call
via CWE-20
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-20
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-20
Show all 51
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

Improper input validation in Intel(R) Neural Compressor software before version 2.5.0 allows an unauthenticated user to potentially escalate privileges via remote access.

BSID: BS-2024-GLOBAL-188548-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-22476?
Improper input validation in Intel(R) Neural Compressor software before version 2.5.0 allows an unauthenticated user to potentially escalate privileges via remote access.
What is the CVSS score for CVE-2024-22476?
CVE-2024-22476 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS: 36.0%.
Is CVE-2024-22476 actively exploited?
No confirmed active exploitation of CVE-2024-22476 as of 2026-09-25.
How do I remediate CVE-2024-22476?
Priority: IMMEDIATE. Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html
What systems are affected by CVE-2024-22476?
CVE-2024-22476 affects Intel.
Vulnerability Details
CVE IDCVE-2024-22476
BSIDBS-2024-GLOBAL-188548-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published2024-05-16
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
SourceNVD
Official Description

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit the vulnerability by sending specially crafted input to the affected software, leading to unauthorized privilege escalation.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Intel — —
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 882 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashcf5fbf2536183cde0ece175b263d3702509ed4a940206d8cd69c72d27b4b10439191a80ef75a1d6866482d194e01a4344aa271aee0831388a49c1a1470ce9f66
Related CVEs affecting Intel
CVE-2000-0384 10.0 NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wiz... CVE-2007-1307 10.0 Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 1... CVE-2021-44228 10.0 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2... CVE-2022-25899 9.8 Authentication bypass for the Open AMT Cloud Toolkit software maintained by I... CVE-2023-4324 9.8 Broadcom RAID Controller web interface is vulnerable due to insecure defaults...
View all Intel CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →