One Boot Flash Update vulnerabilities

5 known vulnerabilities in One Boot Flash Update from Intel. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Intel(R) OFU software: Protection Mechanism Failure

  CVE-2023-25945Feb 14, 2024Intel(R) OFU software

  Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.

• 7.8 High severity

  Intel(R) OFU software: Improper Access Control

  CVE-2023-32204Nov 14, 2023Intel(R) OFU software

  Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.

• 7.8 High severity

  Intel(R) OFU software: Uncontrolled Search Path Element

  CVE-2023-29161Nov 14, 2023Intel(R) OFU software

  Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.

• 7.8 High severity

  Intel(R) OFU software: Improper Access Control

  CVE-2023-29157Nov 14, 2023Intel(R) OFU software

  Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.

• 7.8 High severity

  Intel(R) OFU software: Improper Access Control

  CVE-2022-41784May 10, 2023Intel(R) OFU software

  Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access