← CVE Intelligence

CVE-2024-38433

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness PUBLISHED

Description (CNA)

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.

Affected (CNA)

Vendor / productVersions
Nuvoton / NPCM7xx (Poleg) BootBlockaffected All versions before v10.10.19

CWE

CWE-305

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.