CVE-2023-22841

State: Published
Severity: 6.7 Medium
Published: Aug 11, 2023
Updated: Feb 10, 2026
Reserved: Jan 27, 2023

Description

Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

Scores

CVSS	Score	Vector	Source
3.1	6.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H	intel

Weaknesses

CWE-428 Unquoted search path

Affected Products

Product	Versions
System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipsetn/a	before version 16.0.7Affected

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00830.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.