Описание
Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 16.0.7 (исключая)
Одновременно
cpe:2.3:a:intel:server_firmware_update_utility:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:c621a:-:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00091
Низкий
6.7 Medium
CVSS3
7.3 High
CVSS3
Дефекты
CWE-428
CWE-427
Связанные уязвимости
CVSS3: 6.7
github
больше 2 лет назад
Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS
Процентиль: 26%
0.00091
Низкий
6.7 Medium
CVSS3
7.3 High
CVSS3
Дефекты
CWE-428
CWE-427