7.8

CVE-2024-1598

Potential buffer overflow when handling UEFI variables

Potential buffer overflow 
in unsafe UEFI variable handling 

in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects:

SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phoenixtech ≫ Securecore Technology Version >= 4.1.0.1 < 4.1.0.567
   Intel ≫ Celeron N4020 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.149
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.phoenix.com/security-notifications/cve-2024-1598/
Not Applicable
https://phoenixtech.com/phoenix-security-notifications/cve-2024-1598/
Vendor Advisory