PT-2025-20906 · Phoenix · Phoenix Securecore Technology 4

CVE-2024-12533 · Publicado 2025-05-13 · Atualizado 2025-07-28

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore Technology 4 versions 4.0.1.0 through 4.0.1.1017 Phoenix SecureCore Technology 4 versions 4.1.0.1 through 4.1.0.572 Phoenix SecureCore Technology 4 versions 4.2.0.1 through 4.2.0.337 Phoenix SecureCore Technology 4 versions 4.2.1.1 through 4.2.1.299 Phoenix SecureCore Technology 4 versions 4.3.0.1 through 4.3.0.243 Phoenix SecureCore Technology 4 versions 4.3.1.1 through 4.3.1.186 Phoenix SecureCore Technology 4 versions 4.4.0.1 through 4.4.0.298 Phoenix SecureCore Technology 4 versions 4.5.0.1 through 4.5.0.230 Phoenix SecureCore Technology 4 versions 4.5.1.1 through 4.5.1.102 Phoenix SecureCore Technology 4 versions 4.5.5.1 through 4.5.5.35 Phoenix SecureCore Technology 4 versions 4.6.0.1 through 4.6.0.66

Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4, allowing Input Data Manipulation.

Recommendations: For versions 4.0.1.0 through 4.0.1.1017, update to version 4.0.1.1018 or later. For versions 4.1.0.1 through 4.1.0.572, update to version 4.1.0.573 or later. For versions 4.2.0.1 through 4.2.0.337, update to version 4.2.0.338 or later. For versions 4.2.1.1 through 4.2.1.299, update to version 4.2.1.300 or later. For versions 4.3.0.1 through 4.3.0.243, update to version 4.3.0.244 or later. For versions 4.3.1.1 through 4.3.1.186, update to version 4.3.1.187 or later. For versions 4.4.0.1 through 4.4.0.298, update to version 4.4.0.299 or later. For versions 4.5.0.1 through 4.5.0.230, update to version 4.5.0.231 or later. For versions 4.5.1.1 through 4.5.1.102, update to version 4.5.1.103 or later. For versions 4.5.5.1 through 4.5.5.35, update to version 4.5.5.36 or later. For versions 4.6.0.1 through 4.6.0.66, update to version 4.6.0.67 or later.

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

CVE-2024-12533

Produtos afetados

Phoenix Securecore Technology 4

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12533 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2024-12533 · Aviso do Fabricante
• https://t.me/cvetracker/23738 · Publicação no Telegram
• https://phoenixtech.com/phoenix-security-notifications/cve-2024-12533 · Aviso do Fabricante
• https://phoenix.com/security-notifications/cve-2024-12533 · Nota
• https://twitter.com/CVEnew/status/1922310002422804741 · Publicação no Twitter
• https://t.me/cveNotify/130077 · Publicação no Telegram