Intel Server Boards D50DNP and M50FCP UEFI Improper Input Validation Vulnerability Allowing Privilege Escalation

A vulnerability exists in the UEFI firmware DXE module for Intel Server Boards D50DNP and M50FCP, prior to version R01.02.0003. This vulnerability arises from improper input validation, which may enable a privileged user to escalate privileges through local access.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to update the UEFI firmware on Intel Server Boards D50DNP and M50FCP to version R01.02.0003 or later. Firmware update packages are available on the Intel Download Center for both the D50DNP and M50FCP families.