Lucene search

K
cve22d9ba52-f336-4b0d-bf1f-0efbdcc3c1deCVE-2023-31100
HistoryNov 15, 2023 - 12:15 a.m.

CVE-2023-31100

2023-11-1500:15:07
CWE-284
22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de
web.nvd.nist.gov
20
cve-2023-31100
improper access control
smi handler vulnerability
phoenix securecore™ technology™ 4
spi flash modification
nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
This issue affects SecureCore™ Technology™ 4:

  • from 4.3.0.0 before 4.3.0.203

from

4.3.1.0 before 4.3.1.163
*

from

4.4.0.0 before 4.4.0.217
*

from

4.5.0.0 before 4.5.0.138

Affected configurations

NVD
Node
phoenixsecurecore_technologyRange4.3.0.04.3.0.203
OR
phoenixsecurecore_technologyRange4.3.1.04.3.1.163
OR
phoenixsecurecore_technologyRange4.4.0.04.4.0.217
OR
phoenixsecurecore_technologyRange4.5.0.04.5.0.138

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SecureCore™ Technology™ 4",
    "vendor": "Phoenix",
    "versions": [
      {
        "lessThan": "4.3.0.203",
        "status": "affected",
        "version": "4.3.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.1.163",
        "status": "affected",
        "version": "4.3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.217",
        "status": "affected",
        "version": "4.4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.138",
        "status": "affected",
        "version": "4.5.0.0",
        "versionType": "custom"
      }
    ]
  }
]

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-31100