CVE-2023-25945

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Vendor	Product	Versions
n/a	Intel(R) OFU software	before version 14.1.31

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00927.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00927.htmlVendor Advisory

Timeline

Published: Feb 14, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-259468.8Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze th CVE-2023-259475.5The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attacker CVE-2023-259487.5Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security CVE-2023-259495.5Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially en CVE-2023-25959.8A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is CVE-2023-259507.3HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate us CVE-2023-259516.7Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privile CVE-2023-259525.5Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enab CVE-2023-259539.8Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the CVE-2023-259545.5KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 CVE-2023-259555.5National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processi CVE-2023-259567.5Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Ai