CVE-2023-5058

2023-12-0722:29:05

CWE-20

Phoenix

www.cve.org

improper input validation

denial-of-service

arbitrary code execution

phoenix securecore™ technology™ 4

0.0004 Low

EPSS

Percentile

9.9%

JSON

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "SecureCore™ Technology™ 4",
    "vendor": "Phoenix",
    "versions": [
      {
        "status": "affected",
        "version": "4.0"
      }
    ]
  }
]