CVE Feed

    Dashboard / CVE / CVE-2023-22841

    CVE-2023-22841

    Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Aug 11, 2023
    Last Modified:Feb 10, 2026
    EPS:Aug 11, 2023
    EPSS Score:0.00091
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    C621a
    Vendor
    Intel
    Product
    Server Firmware Update Utility
    Vendor
    System Firmware Update Utility For Some Intel Server Boards And Intel Server Systems Based On Intel 621a Chipset
    Product
    System Firmware Update Utility For Some Intel Server Boards And Intel Server Systems Based On Intel 621a Chipset

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-29493 (CVSS 4.5) — Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 a…
    CVE-2022-29494 (CVSS 6.5) — Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and …
    CVE-2022-35729 (CVSS 7.5) — Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenti…
    CVE-2022-0004 (CVSS 6.8) — Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in I…
    CVE-2021-33150 (CVSS 6.8) — Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may a…
    CVE-2021-33107 (CVSS 4.6) — Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) …
    CVE-2021-0060 (CVSS 6.6) — Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0…
    CVE-2020-8703 (CVSS 6.7) — Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, …
    CVE-2020-24507 (CVSS 4.4) — Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High