CVE-2023-22841

MEDIUM

Intel Server Firmware Update Utility - Uncontrolled Search Path

Title source: rule
STIX 2.1

Description

Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Scores

CVSS v3 6.7
EPSS 0.0009
EPSS Percentile 25.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428 CWE-427
Status published
Products (1)
intel/server_firmware_update_utility < 16.0.7
Published Aug 11, 2023
Tracked Since Feb 18, 2026