Escalation of Privilege Vulnerability in Server Firmware Update Utility by Intel

CVE-2025-25210

What is CVE-2025-25210?

A vulnerability exists in Intel's Server Firmware Update Utility (SysFwUpdt) versions prior to 16.0.12, allowing potential escalation of privilege. This issue arises from improper input validation, which could be exploited by an adversary with privileged access through a low complexity attack. The exploitation may occur via local access without requiring special internal knowledge or user interaction, potentially compromising the system's confidentiality, integrity, and availability.

References