CNNVD-202511-1135 Information

CNNVD ID

CNNVD-202511-1135

CVE-2025-25059

  • CNNVD Published: 2025-11-11

Description (Chinese)

Intel OFU是美国英特尔(Intel)公司的一款闪存更新应用程序。 Intel OFU 14.1.31之前版本存在代码问题漏洞,该漏洞源于未控制的搜索路径,可能导致权限提升。

Description (English)

Intel OFU is a flash update application for Intel. There was a code problem loophole in the previous version of Intel OFU 14.1.31, which originated from an uncontrolled search path and could lead to an increase in privileges.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

英特尔

Published

2025-11-11

Last Modified

2026-02-24

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html https://access.redhat.com/security/cve/cve-2025-25059

Patch

https://www.intel.com/content/www/us/en/download/19032/intel-one-boot-flash-update-intel-ofu-utility-for-intel-server-boards-and-intel-server-systems-based-on-intel-62x-chipset.html?product=89016

Share on: