Intel R Server Firmware Update Utility Software
Monthly
Privilege escalation in Intel Server Firmware Update Utility Software before version 16.0.12 exposes authenticated local users to an uncontrolled search path (DLL/library hijacking) condition within the Ring 3 user-application layer. A low-privileged local attacker who can plant a malicious library or executable in a directory the utility searches at launch can escalate privileges with high impact to confidentiality, integrity, and availability of the affected system. No public exploit is identified at time of analysis, and EPSS sits at the 3rd percentile, consistent with SSVC exploitation status of 'none'.
Privilege escalation in Intel Server Firmware Update Utility Software before version 16.0.12 exposes authenticated local users to an uncontrolled search path (DLL/library hijacking) condition within the Ring 3 user-application layer. A low-privileged local attacker who can plant a malicious library or executable in a directory the utility searches at launch can escalate privileges with high impact to confidentiality, integrity, and availability of the affected system. No public exploit is identified at time of analysis, and EPSS sits at the 3rd percentile, consistent with SSVC exploitation status of 'none'.