Read the docs

Phoenixtech

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Phoenixtech records in CISA KEV

No Phoenixtech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Winflash · all components

TI-2023-17917 CVE-2023-35841 · GHSA-qhcp-3fxf-c8vc

WinFlash Driver Permissions Issue

Priority LOW 36

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00358 Published 2024-05-14 Fixed in 4.5.0.0 CWE-732
Open these records in search →