CVE Daily

CVE-2023-31100

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Tech...

High CVSS 8.4

Overview

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
This issue affects SecureCore™ Technology™ 4:


* from 4.3.0.0 before 4.3.0.203
*

from

4.3.1.0 before 4.3.1.163
*

from

4.4.0.0 before 4.4.0.217
*

from

4.5.0.0 before 4.5.0.138

CWE: CWE-284 Published: 2023-11-15T00:15:07.573
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.4 (HIGH)
  • Detected tags: misconfiguration (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags