Intel Server Configuration and Firmware Update Utilities Privilege Escalation Vulnerability

A vulnerability allowing improper link resolution before file access has been identified in some Intel Server Configuration Utility and Intel Server Firmware Update Utility software versions prior to 16.0.12. This vulnerability may enable an authenticated user to escalate privileges within Ring 3: User Applications. The issue could be exploited through local access, requiring active user interaction and without special internal knowledge. The vulnerability has the potential to impact the confidentiality, integrity, and availability of the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Users are advised to update Intel Server Configuration Utility and Intel Server Firmware Update Utility software to version 16.0.12 or later. The updated versions are available for download from the Intel Download Center.