Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Phoenixtech Component: Securecore Technology Clear all filters
TI-2024-11631 CVE-2024-12533 · GHSA-829j-v57j-p8jf

Improper check for unusual conditions in Phoenix SecureCore Technology 4

Priority LOW 15

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00152 Published 2025-05-13 Fixed in 4.0.1.1018, 4.1.0.573 +9 CWE-754
TI-2024-19743 CVE-2024-29980 · GHSA-v29f-v8vv-v975

Unsafe Handling of IHV UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00146 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-19742 CVE-2024-29979 · GHSA-x4p9-p8g9-v45f

Unsafe Handling of Phoenix UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00186 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-01492 CVE-2024-1598 · GHSA-g86v-m7q4-wf42

Potential buffer overflow when handling UEFI variables

Priority LOW 36

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-05-14 Fixed in 4.1.0.567 CWE-121
TI-2024-00702 CVE-2024-0762 · GHSA-cjqq-r96c-pwrf

Potential buffer overflow when handling UEFI variables

Priority LOW 37

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00758 Published 2024-05-14 Fixed in 4.0.1.998, 4.1.0.562 +7 CWE-120
TI-2023-04658 CVE-2023-5058 · GHSA-mpmx-6xxg-22w6

Improper input validation in Phoenix SecureCore™ Technology™ 4

Priority LOW 34

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2023-12-07 No fix listed CWE-20
TI-2023-14825 CVE-2023-31100 · GHSA-h3cr-gxpm-fxxc

Improper access control in Phoenix SecureCore™ Technology™ 4

Priority LOW 36

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00189 Published 2023-11-14 Fixed in 4.3.0.203, 4.3.1.163 +2 CWE-284