description: Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.
This issue affects SecureCore™ Technology™ 4:
*  from 4.3.0.0 before 4.3.0.203
*
from
4.3.1.0 before 4.3.1.163
*
from
4.4.0.0 before 4.4.0.217
*
from
4.5.0.0 before 4.5.0.138
problem types: CWE-284 Improper Access Control in SMI handler
affected:
{
defaultStatus: unaffected
product: SecureCore™ Technology™ 4
vendor: Phoenix
versions:
lessThan: 4.3.0.203, status: affected, version: 4.3.0.0, versionType: custom
lessThan: 4.3.1.163, status: affected, version: 4.3.1.0, versionType: custom
lessThan: 4.4.0.217, status: affected, version: 4.4.0.0, versionType: custom
lessThan: 4.5.0.138, status: affected, version: 4.5.0.0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL