Low WID-SEC-2025-0062 2 CVEs

Phoenix Technologies BIOS: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 14, 2025 · Updated Jan 14, 2025 · de-DE

Vendor: Lenovo Vendor: Phoenix Technologies Product: BIOS Product: BIOS Product: Computer

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Phoenix Technologies BIOS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Phoenix BIOS ist eine Firmware für IBM PC kompatible Computern

Vulnerabilities 2

Low 2.3

CVE-2024-29979

Unsafe Handling of Phoenix UEFI Variables

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipu…

Phoenix SecureCore™ for Intel Coffee Lake SecureCore™ for Intel Ice Lake SecureCore™ for Intel Kaby Lake

Jan 14, 2025
Low 2.3

CVE-2024-29980

Unsafe Handling of IHV UEFI Variables

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipu…

Phoenix SecureCore™ for Intel Coffee Lake SecureCore™ for Intel Ice Lake SecureCore™ for Intel Kaby Lake

Jan 14, 2025

Revision history

2025-01-14 #1
Initiale Fassung

References

Phoenix Security Notification vom 2025-01-14
https://www.phoenix.com/phoenix-security-notifications/cve-2024-29979/
Phoenix Security Notification vom 2025-01-14
https://www.phoenix.com/phoenix-security-notifications/cve-2024-29980/
Lenovo Security Advisory LEN-183647 vom 2025-01-14
https://support.lenovo.com/us/en/product_security/LEN-183647