Vulnerability details

CVE-2025-22892

OpenVINO™ model server software maintained by Intel

CVSS 4.0

7.1High

Official description

Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS scores

Score	Version	Source	Vector
7.1High	4.0	CVEProject cvelistV5 (CNA) (intel)	`CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N`
6.5Medium	3.1	CVEProject cvelistV5 (CNA) (intel)	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Affected products

Vendor	Product	Versions	Source
—	OpenVINO™ model server software maintained by Intel(R)	before version 2024.4	CVEProject cvelistV5 (CNA)

References and advisories

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01272.html

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-05-14
Last updated: 2025-05-14
State: Published
Assigner (CNA): intel

Exploit prediction (EPSS)

0.27%

Probability of exploitation in 30 days

20%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-400
Uncontrolled Resource Consumption