phoenixtech records

8 published records for vendor phoenixtech.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2024-0762Proof of concept	Potential buffer overflow when handling UEFI variablesintel · celeron 3865u · CWE-120 Memory safety	High7.8	—	0.8%	May 14, 2024
31Monitor	CVE-2023-35841No exploit	WinFlash Driver Permissions Issuephoenixtech · winflash · CWE-732 Local privilege escalation	High7.8	—	0.4%	May 14, 2024
31Monitor	CVE-2023-5058No exploit	Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentialphoenixtech · securecore technology · CWE-20 RCE	High7.8	—	0.3%	Dec 7, 2023
31Monitor	CVE-2024-1598No exploit	Potential buffer overflow when handling UEFI variablesintel · celeron n4020 · CWE-121 Memory safety	High7.8	—	0.2%	May 14, 2024
28Monitor	CVE-2023-31100No exploit	Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.phoenixtech · securecore technology · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Nov 14, 2023
18Monitor	CVE-2024-29979No exploit	Unsafe Handling of Phoenix UEFI Variablesintel · celeron 3865u · CWE-754	Medium4.6	—	0.2%	Jan 14, 2025
18Monitor	CVE-2024-29980No exploit	Unsafe Handling of IHV UEFI Variablesintel · celeron 3865u · CWE-754	Medium4.6	—	0.1%	Jan 14, 2025
13Monitor	CVE-2024-12533No exploit	Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This isphoenixtech · securecore technology · CWE-754 Denial of service	Low3.3	—	0.1%	May 13, 2025

CVE-2024-0762
31Monitor
Potential buffer overflow when handling UEFI variables
HighCVSS 7.8Proof of conceptEPSS 1%
- Memory safety
intel · celeron 3865uMay 14, 2024
CVE-2023-35841
31Monitor
WinFlash Driver Permissions Issue
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
phoenixtech · winflashMay 14, 2024
CVE-2023-5058
31Monitor
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potential
HighCVSS 7.8No exploitEPSS 0%
- RCE
phoenixtech · securecore technologyDec 7, 2023
CVE-2024-1598
31Monitor
Potential buffer overflow when handling UEFI variables
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
intel · celeron n4020May 14, 2024
CVE-2023-31100
28Monitor
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
phoenixtech · securecore technologyNov 14, 2023
CVE-2024-29979
18Monitor
Unsafe Handling of Phoenix UEFI Variables
MediumCVSS 4.6No exploitEPSS 0%
intel · celeron 3865uJan 14, 2025
CVE-2024-29980
18Monitor
Unsafe Handling of IHV UEFI Variables
MediumCVSS 4.6No exploitEPSS 0%
intel · celeron 3865uJan 14, 2025
CVE-2024-12533
13Monitor
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This is
LowCVSS 3.3No exploitEPSS 0%
- Denial of service
phoenixtech · securecore technologyMay 13, 2025