CVE-2023-31100 — Phoenix / SecureCore™ Technology™ 4

Description (CNA)

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.217 * from 4.5.0.0 before 4.5.0.138

Affected (CNA)

Vendor / product	Versions
Phoenix / SecureCore™ Technology™ 4	affected 4.3.0.0 before 4.3.0.203; affected 4.3.1.0 before 4.3.1.163; affected 4.4.0.0 before 4.4.0.217; affected 4.5.0.0 before 4.5.0.138

CWE

CWE-284

References

https://phoenixtech.com/phoenix-security-notifications/cve-2023-31100/

ADP enrichment

CVE

No English description supplied.

https://www.phoenix.com/security-notifications/

CISA-ADP

No English description supplied.

No references supplied.