Improper Link Resolution in Intel Server Configuration Utility and Firmware Update Software
CVE-2025-24918

5.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Server Configuration Utility Software And Intel(r) Server Firmware Update Utility Software
Vendor
CVE Published:
11 November 2025

What is CVE-2025-24918?

The vulnerability arises from improper link resolution prior to file access in certain Intel Server software, which could allow an authenticated attacker to escalate privileges. Exploitation of this flaw requires a high complexity attack and user interaction, compromising system confidentiality, integrity, and availability. This vulnerability impacts the vulnerable systems significantly, necessitating immediate attention and remediation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) Server Configuration Utility software and Intel(R) Server Firmware Update Utility software before version 16.0.12.

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.