VULNERABILITY INTELLIGENCE

CVE-2023-31100

CVSS score8.4 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2023-11-15

Last modified2026-06-17

Description

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.217 * from 4.5.0.0 before 4.5.0.138