PT-2026-7314 · Intel · System Firmware Update Utility

CVE-2025-35999 · Publicado 2026-02-10 · Atualizado 2026-02-10

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel System Firmware Update Utility (SysFwUpdt) versions prior to 16.0.12

Description A misconfiguration in permission assignments for critical resources within the System Firmware Update Utility (SysFwUpdt) for Intel server boards and systems may allow a privilege escalation. A local attacker with privileged user access and a low complexity attack may exploit this issue. The potential impact to the system includes confidentiality, integrity, and availability. The vulnerability requires passive user interaction to be exploited.

Recommendations Update to System Firmware Update Utility (SysFwUpdt) version 16.0.12 or later.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2025-35999

Produtos afetados

System Firmware Update Utility

Referências · 3

• https://twitter.com/CVEnew/status/2021279063323591105 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-35999 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01412.html · Nota