Intel One Boot Flash Update Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Intel One Boot Flash Update (OFU) software versions prior to 14.1.31. This vulnerability arises from an uncontrolled search path within user applications, potentially allowing an unprivileged, authenticated user to escalate privileges. The issue may be exploited through local access, requiring active user interaction and without special internal knowledge.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Intel has discontinued support for the OFU software as of April 4, 2025, and recommends users uninstall or discontinue use of the software as soon as possible.