Skip to content
OpenAdvisories
High · 8.4 CVE-2023-31100 EUVD-2023-35428GHSA-h3cr-gxpm-fxxc

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects…

Published Nov 14, 2023 · Updated Jul 28, 2025 · Assigned by Phoenix

Description

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
This issue affects SecureCore™ Technology™ 4:

* from 4.3.0.0 before 4.3.0.203
*

from

4.3.1.0 before 4.3.1.163
*

from

4.4.0.0 before 4.4.0.217
*

from

4.5.0.0 before 4.5.0.138

Affected products

VendorProductAffectedFixed
Phoenix SecureCore™ Technology™ 4 4.3.0.0 – < 4.3.0.203, 4.3.1.0 – < 4.3.1.163, 4.4.0.0 – < 4.4.0.217, 4.5.0.0 – < 4.5.0.138 4.3.0.203

References