Escalation of Privilege Vulnerability in Intel Server Configuration Utility

CVE-2023-25075

What is CVE-2023-25075?

An unquoted search path vulnerability exists in the installer of certain versions of Intel Server Configuration Utility, allowing authenticated users to exploit this flaw. By leveraging local access, an attacker could potentially elevate their privileges, granting them unauthorized access to sensitive system resources. This vulnerability emphasizes the importance of proper path handling in software installations to prevent exploitation.

References