CVE-2025-24648 is an incorrect privilege assignment vulnerability in Bowo Admin and Site Enhancements (ASE) up to version 7.6.2.1. This flaw permits privilege escalation, enabling an attacker with limited privileges to gain higher-level access. The CVSS 3.1 base score is 7.5, with network attack vector, high attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker with low privileges to escalate their privileges, potentially leading to full compromise of the affected system. This includes unauthorized access to sensitive information, modification of data, and disruption of service. The high CVSS score reflects the severity of these impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. In the meantime, restrict access to the affected ASE versions to trusted users only and apply the principle of least privilege to limit potential exploitation.