Phoenix
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SecureCore™ for Intel Coffee Lake | 3 | – | Jan 14, 2025 |
| SecureCore™ for Intel Ice Lake | 3 | – | Jan 14, 2025 |
| SecureCore™ for Intel Comet Lake | 3 | – | Jan 14, 2025 |
| SecureCore Technology 4 | 3 | – | May 13, 2025 |
| SecureCore™ for Intel Kaby Lake | 3 | – | Jan 14, 2025 |
| SecureCore™ for Intel Tiger Lake | 1 | – | May 14, 2024 |
| SecureCore™ for Intel Alder Lake | 1 | – | May 14, 2024 |
| WinFlash Driver | 1 | – | May 14, 2024 |
| SecureCore™ for Intel Gemini Lake | 1 | – | May 14, 2024 |
| SecureCore™ for Intel Jasper Lake | 1 | – | May 14, 2024 |
| SecureCore™ for Intel Meteor Lake | 1 | – | May 14, 2024 |
| SecureCore™ for Intel Raptor Lake | 1 | – | May 14, 2024 |
Exploited and recent CVEs
- CVE-2024-12533 Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0 0.2%
- CVE-2024-29980 Unsafe Handling of IHV UEFI Variables 0.1%
- CVE-2024-29980 Unsafe Handling of IHV UEFI Variables 0.1%
- CVE-2024-29980 Unsafe Handling of IHV UEFI Variables 0.1%
- CVE-2024-29980 Unsafe Handling of IHV UEFI Variables 0.1%
- CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables 0.2%
- CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables 0.2%
- CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables 0.2%
- CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables 0.2%
- CVE-2024-1598 Potential buffer overflow when handling UEFI variables 0.2%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables 0.8%
- CVE-2023-35841 WinFlash Driver Permissions Issue 0.4%
- CVE-2023-5058 Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execut 0.3%
- CVE-2023-31100 Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0. 0.2%