Uncontrolled Search Path Vulnerability in Intel Server Firmware Update Utility Software

CVE-2025-35969

What is CVE-2025-35969?

The vulnerability in the Intel Server Firmware Update Utility Software results from an uncontrolled search path, which may allow attackers with authenticated access to escalate privileges. This can lead to significant security risks for systems where an adversary leverages local access and potential user interactions, placing system confidentiality, integrity, and availability at risk, albeit requiring specific attack conditions.

References