Read the docs

Phoenixtech

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Phoenixtech records in CISA KEV

No Phoenixtech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Securecore Technology 7 records LOW Winflash 1 record LOW

Records

8 records

TI-2024-00702 CVE-2024-0762 · GHSA-cjqq-r96c-pwrf

Potential buffer overflow when handling UEFI variables

Priority LOW 37

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00758 Published 2024-05-14 Fixed in 4.0.1.998, 4.1.0.562 +7 CWE-120
TI-2024-01492 CVE-2024-1598 · GHSA-g86v-m7q4-wf42

Potential buffer overflow when handling UEFI variables

Priority LOW 36

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-05-14 Fixed in 4.1.0.567 CWE-121
TI-2023-17917 CVE-2023-35841 · GHSA-qhcp-3fxf-c8vc

WinFlash Driver Permissions Issue

Priority LOW 36

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00358 Published 2024-05-14 Fixed in 4.5.0.0 CWE-732
TI-2023-14825 CVE-2023-31100 · GHSA-h3cr-gxpm-fxxc

Improper access control in Phoenix SecureCore™ Technology™ 4

Priority LOW 36

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00189 Published 2023-11-14 Fixed in 4.3.0.203, 4.3.1.163 +2 CWE-284
TI-2023-04658 CVE-2023-5058 · GHSA-mpmx-6xxg-22w6

Improper input validation in Phoenix SecureCore™ Technology™ 4

Priority LOW 34

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2023-12-07 No fix listed CWE-20
TI-2024-19743 CVE-2024-29980 · GHSA-v29f-v8vv-v975

Unsafe Handling of IHV UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00146 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-19742 CVE-2024-29979 · GHSA-x4p9-p8g9-v45f

Unsafe Handling of Phoenix UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00186 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-11631 CVE-2024-12533 · GHSA-829j-v57j-p8jf

Improper check for unusual conditions in Phoenix SecureCore Technology 4

Priority LOW 15

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00152 Published 2025-05-13 Fixed in 4.0.1.1018, 4.1.0.573 +9 CWE-754
Open these records in search →