Phoenixtech Securecore Technology — known CVE vulnerabilities

Every CVE whose affected-product data names Phoenixtech Securecore Technology, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-31100 — CVSS 8.4 (high): Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue…
• CVE-2023-5058 — CVSS 7.8 (high): Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4…
• CVE-2024-1598 — CVSS 7.5 (high): Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™…
• CVE-2024-0762 — CVSS 7.5 (high): Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix…
• CVE-2024-12533 — CVSS 3.3 (low): Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This…
• CVE-2024-29979 — CVSS 2.3 (low): Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for…
• CVE-2024-29980 — CVSS 2.3 (low): Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for…