CVE-2023-22841

Summary

CVE-2023-22841 is a vulnerability affecting the System Firmware Update Utility (SysFwUpdt) on some Intel server boards and systems based on Intel 621A Chipset. The issue lies in an unquoted search path within the software installer, which could potentially enable an authenticated user to escalate privileges via local access. This vulnerability may pose a significant risk if exploited, and users are advised to update their systems to the latest version of SysFwUpdt as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.