Cyber Resilience

CVE-2024-49814

HighLPE

Published: 06 February 2025

Published
06 February 2025
Modified
08 August 2025
KEV Added
—
Patch
—
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0001 2.0th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-49814 is a high-severity Execution with Unnecessary Privileges (CWE-250) vulnerability in Ibm Security Verify Access. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 2.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and AC-6 (Least Privilege).

Deeper analysis

CVE-2024-49814 is a privilege escalation vulnerability in IBM Security Verify Access Appliance versions 10.0.0 through 10.0.3, stemming from execution with unnecessary privileges (CWE-250). A locally authenticated user could exploit this flaw to increase their privileges on the affected appliance. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high confidentiality, integrity, and availability impacts.

The attack requires local access and low privileges (PR:L), with low attack complexity and no user interaction needed. An attacker with local authentication could leverage the unnecessary privileges during execution to elevate their access rights, potentially gaining full control over the appliance and compromising its security functions.

IBM has published an advisory detailing the issue and mitigation steps at https://www.ibm.com/support/pages/node/7182558. Security practitioners should consult this reference for patch availability and remediation guidance specific to the affected versions.

EU & UK References

Vulnerability details

IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges.

CWE(s)
CWE-250

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Direct local privilege escalation via exploitation of unnecessary privileges (CWE-250) in appliance software execution.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-0161Same product: Ibm Security Verify Access
CVE-2026-1346Same product: Ibm Security Verify Access
CVE-2026-3623Same vendor: Ibm
CVE-2025-36184Same vendor: Ibm
CVE-2024-43187Same product: Ibm Security Verify Access
CVE-2026-2311Same vendor: Ibm
CVE-2024-45647Same product: Ibm Security Verify Access
CVE-2025-14604Same vendor: Ibm
CVE-2026-8179Same vendor: Ibm
CVE-2025-58383Shared CWE-250

Affected Assets

ibm
security verify access
10.0.0 — 10.0.3

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

AC-6 Least Privilege good match
prevent

AC-6 enforces the principle of least privilege, directly preventing execution with unnecessary privileges that enables local privilege escalation in the IBM Security Verify Access Appliance.

AC-3 Access Enforcement good match
prevent

AC-3 requires enforcement of approved access authorizations, blocking unauthorized privilege escalations by locally authenticated users.

AC-2 Account Management partial match
prevent

AC-2 manages account privileges to ensure only necessary access levels are assigned, mitigating excessive privileges exploitable for escalation.

References