Intel One Boot Flash Update Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Intel One Boot Flash Update (OFU) software versions prior to 14.1.31. The issue arises from incorrect default permissions that may allow an unprivileged, authenticated user to escalate privileges. This vulnerability could be exploited through a complex, high-effort attack requiring local access and active user interaction, potentially impacting the system's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Intel has discontinued support for the OFU software as of April 4, 2025, and recommends users uninstall or stop using it as soon as possible.