PT-2025-46400 · Intel · Intel One Boot Flash Update+1

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-25059

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) One Boot Flash Update (Intel(R) OFU) versions prior to 14.1.31

Description An uncontrolled search path issue exists in some Intel(R) One Boot Flash Update (Intel(R) OFU) software. This issue, present within Ring 3: User Applications, may allow an escalation of privilege. A local, unprivileged software adversary with an authenticated user and a high complexity attack may be able to escalate privileges. Active user interaction is required for a potential attack. The issue may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations Update Intel(R) One Boot Flash Update (Intel(R) OFU) to version 14.1.31 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-25059

Affected Products

Intel Ofu

Intel One Boot Flash Update

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-25059 · Security Note
• https://twitter.com/CVEnew/status/1988303480877183141 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html · Note