PT-2025-2402 · Phoenix · Phoenix Securecore

Published 2025-01-14 · Updated 2025-09-25 · CVE-2024-29979

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore for Intel Ice Lake versions prior to 4.2.0.334

Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability, which allows Input Data Manipulation. This vulnerability affects Phoenix SecureCore for various Intel platforms.

Recommendations: For Phoenix SecureCore for Intel Kaby Lake versions prior to 4.0.1.1012, update to version 4.0.1.1012 or later. For Phoenix SecureCore for Intel Coffee Lake versions prior to 4.1.0.568, update to version 4.1.0.568 or later. For Phoenix SecureCore for Intel Comet Lake versions prior to 4.2.1.292, update to version 4.2.1.292 or later. For Phoenix SecureCore for Intel Ice Lake versions prior to 4.2.0.334, update to version 4.2.0.334 or later.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2024-29979

Affected Products

Phoenix Securecore

References · 9

• https://osv.dev/vulnerability/CVE-2024-29979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29979 · Security Note
• https://phoenixtech.com/phoenix-security-notifications/cve-2024-29979 · Vendor Advisory
• https://t.me/cvedetector/15295 · Telegram Post
• https://t.me/cveNotify/130075 · Telegram Post
• https://t.me/cveNotify/136459 · Telegram Post
• https://phoenix.com/phoenix-security-notifications/cve-2024-29979 · Note
• https://twitter.com/CVEnew/status/1880761235806752902 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1879221258807656644 · Twitter Post