Intel Server Boards D50DNP and M50FCP BackupBiosUpdate UEFI Firmware Improper Input Validation Vulnerability Allowing Information Disclosure

A vulnerability exists in the BackupBiosUpdate UEFI firmware SmiVariable driver for Intel Server D50DNP and M50FCP boards, prior to version R01.02.0003. This vulnerability arises from improper input validation, which may enable a privileged user to disclose information through local access.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users are advised to update Intel Server Board D50DNP and M50FCP to UEFI version R01.02.0003 or later. The update is available through the Intel Download Center.