CVE-2025-35969
Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35969?
CVE-2025-35969 is considered a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-35969?
To mitigate CVE-2025-35969, upgrade to Intel Server Firmware Update Utility version 16.0.12 or later.
What systems are affected by CVE-2025-35969?
CVE-2025-35969 affects Intel Server Firmware Update Utility versions prior to 16.0.12.
What type of vulnerability is CVE-2025-35969?
CVE-2025-35969 is characterized as an uncontrolled search path vulnerability that may lead to privilege escalation.
Who can exploit CVE-2025-35969?
An authenticated user with knowledge of the high-complexity attack methods may exploit CVE-2025-35969.