Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Phoenixtech Clear all filters
TI-2024-11631 CVE-2024-12533 · GHSA-829j-v57j-p8jf

Improper check for unusual conditions in Phoenix SecureCore Technology 4

Priority LOW 15

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00152 Published 2025-05-13 Fixed in 4.0.1.1018, 4.1.0.573 +9 CWE-754
TI-2024-19743 CVE-2024-29980 · GHSA-v29f-v8vv-v975

Unsafe Handling of IHV UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00146 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-19742 CVE-2024-29979 · GHSA-x4p9-p8g9-v45f

Unsafe Handling of Phoenix UEFI Variables

Priority LOW 20

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for…

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.00186 Published 2025-01-14 Fixed in 4.0.1.1012, 4.1.0.568 +2 CWE-754
TI-2024-01492 CVE-2024-1598 · GHSA-g86v-m7q4-wf42

Potential buffer overflow when handling UEFI variables

Priority LOW 36

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2024-05-14 Fixed in 4.1.0.567 CWE-121
TI-2024-00702 CVE-2024-0762 · GHSA-cjqq-r96c-pwrf

Potential buffer overflow when handling UEFI variables

Priority LOW 37

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00758 Published 2024-05-14 Fixed in 4.0.1.998, 4.1.0.562 +7 CWE-120
TI-2023-17917 CVE-2023-35841 · GHSA-qhcp-3fxf-c8vc

WinFlash Driver Permissions Issue

Priority LOW 36

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00358 Published 2024-05-14 Fixed in 4.5.0.0 CWE-732
TI-2023-04658 CVE-2023-5058 · GHSA-mpmx-6xxg-22w6

Improper input validation in Phoenix SecureCore™ Technology™ 4

Priority LOW 34

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2023-12-07 No fix listed CWE-20
TI-2023-14825 CVE-2023-31100 · GHSA-h3cr-gxpm-fxxc

Improper access control in Phoenix SecureCore™ Technology™ 4

Priority LOW 36

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00189 Published 2023-11-14 Fixed in 4.3.0.203, 4.3.1.163 +2 CWE-284