CVE-2025-25210

Name of the Vulnerable Software and Affected Versions Server Firmware Update Utility (SysFwUpdt) versions prior to 16.0.12

Description A flaw exists in the input validation process of the Server Firmware Update Utility (SysFwUpdt) within Ring 3: User Applications. This issue may allow a system software adversary with privileged user access to escalate privileges with low complexity. The issue can be exploited via local access without requiring special internal knowledge or user interaction. The potential impact to the system includes confidentiality, integrity, and availability.

Recommendations Update Server Firmware Update Utility (SysFwUpdt) to version 16.0.12 or later.