Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on…
CVSS 3.1MEDIUM 6.7·Local·High privileges·No interaction·EPSS 0.00198·Published 2024-07-11·Fixed in v10.10.19CWE-305