CVE-2025-35969: Medium severity Intel Intel Server Firmware Update Utility vulnerability
Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) Server Firmware Update Utility Softwareto a version that resolves this vulnerability.Fixed in 16.0.12
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35969?
CVE-2025-35969 is considered a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-35969?
To mitigate CVE-2025-35969, upgrade to Intel Server Firmware Update Utility version 16.0.12 or later.
What systems are affected by CVE-2025-35969?
CVE-2025-35969 affects Intel Server Firmware Update Utility versions prior to 16.0.12.
What type of vulnerability is CVE-2025-35969?
CVE-2025-35969 is characterized as an uncontrolled search path vulnerability that may lead to privilege escalation.
Who can exploit CVE-2025-35969?
An authenticated user with knowledge of the high-complexity attack methods may exploit CVE-2025-35969.