CVE-2025-35969: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2025-35999: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource for some System Firmware Update Utility SysFwUpdt for IntelR Server Boards and IntelR Server Systems Based before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileg...

CVE-2025-24918: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' for some IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an...

CVE-2025-21100: Improper Initialization

Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20034: Improper Input Validation

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the IntelR Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20009: Improper Input Validation

Improper input validation in the UEFI firmware GenerationSetup module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-21094: Improper Input Validation

Improper input validation in the UEFI firmware DXE module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-24308: Improper Input Validation

Improper input validation in the UEFI firmware error handler for the IntelR Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-42492: Uncontrolled Search Path Element

Uncontrolled search path element in some BIOS and System Firmware Update Package for IntelR Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20097: Uncaught Exception

Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2023-31276: Heap-based Buffer Overflow

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2023-29164: Improper Access Control

Improper access control in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable...

CVE-2024-40885: Use After Free

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609: Improper Access Control

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-34167: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36282: Improper Input Validation

Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158: Improper Input Validation

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31154: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167: Improper Input Validation

Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811: Improper Input Validation

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...