VULNERABILITY INTELLIGENCE
CVE-2023-25075
CVSS score6.7 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2023-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness classification
- CWE-428: Unquoted Search Path or Element
Primary references
- secure@intel.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory