CVE-2023-22841

MEDIUM

Intel Server Firmware Update Utility < 16.0.7 - Authenticated Privilege Escalation via Unquoted Search Path

Title source: llm

Description

Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Core 1

Core References

Patch, Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00830.html

Scores

CVSS v3 6.7

EPSS 0.0015

EPSS Percentile 4.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-428 CWE-427

Status published

Products (1)

intel/server_firmware_update_utility < 16.0.7

Published Aug 11, 2023

Tracked Since Feb 18, 2026