CVE-2023-22841

MEDIUM

Intel Server Firmware Update Utility - Uncontrolled Search Path

Title source: rule

Description

Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Scores

CVSS v3 6.7
EPSS 0.0009
EPSS Percentile 25.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-428 CWE-427
Status published

Affected Products (1)

intel/server_firmware_update_utility < 16.0.7

Timeline

Published Aug 11, 2023
Tracked Since Feb 18, 2026