CVE-2024-29979

14.01.2025, 16:15

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore for Intel Kaby Lake, Phoenix SecureCore for Intel Coffee Lake, Phoenix SecureCore for Intel Comet Lake, Phoenix SecureCore for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore for Intel Kaby Lake: before 4.0.1.1012; SecureCore for Intel Coffee Lake: before 4.1.0.568; SecureCore for Intel Comet Lake: before 4.2.1.292; SecureCore for Intel Ice Lake: before 4.2.0.334.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	2.3 LOW	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Phoenix	CNA	2.3 LOW	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 7%

Vendor	Product	Version
phoenixtech	securecore_technology	𝑥 < 4.0.1.1012
phoenixtech	securecore_technology	𝑥 < 4.1.0.568
phoenixtech	securecore_technology	4.0.1.1 ≤ 𝑥 < 4.2.1.292
phoenixtech	securecore_technology	𝑥 < 4.2.0.334

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-754 - Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.

References

https://phoenixtech.com/phoenix-security-notifications/cve-2024-29979/