CVE-2025-22453

Name of the Vulnerable Software and Affected Versions Server Firmware Update Utility(SysFwUpdt) versions prior to 16.0.12

Description A flaw exists in the input validation process of the Server Firmware Update Utility(SysFwUpdt) within Ring 3: User Applications. This issue could allow a system software adversary with a privileged user account and a high complexity attack to achieve local code execution. The potential impact includes high confidentiality, integrity, and availability risks to the vulnerable system. The issue requires local access and does not require user interaction.

Recommendations Update Server Firmware Update Utility(SysFwUpdt) to version 16.0.12 or later.