Phoenix vulnerabilities
We track 5 vulnerabilities in Phoenix products across 13 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
Latest Phoenix vulnerabilities
- 7.8 High severity
SecureCore™ for Intel Gemini Lake: Stack-based Buffer Overflow
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.
- 7.8 High severity
SecureCore™ for Intel Kaby Lake: Buffer Copy without Checking Size of Input
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™ for Intel Coffee Lake: from 4.1.0.1 bef
- 7.8 High severity
WinFlash Driver: Incorrect Permission Assignment for Critical Resource
Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.
- 7.8 High severity
Improper Input Validation in the processing of user-supplied splash screen during system boot…
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.
- 7.1 High severity
SecureCore™ Technology™ 4: Improper Access Control
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.2