VDB
BDU%3A2024-06107
BDU%3A2024-06107
PUBLISHED
CVSS 6.699999809265137 MEDIUM
Уязвимость микропрограммного обеспечения BMC-контроллеров Nuvoton BootBlock серии Nuvoton NPCM7xx, связанная с обходом аутентификации в силу исходной ошибки, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nuvoton | npcm7xx_firmware | 0 |
| Nuvoton Technology Co., Ltd. | Nuvoton BootBlock | |
| Nuvoton | NPCM7xx (Poleg) BootBlock | All versions |
Timeline
- Jul 11, 2024 CVE Published
- Jul 11, 2024 PoC Published
- Aug 9, 2024 CVE Updated
References
- https://www.nuvoton.com/products/cloud-computing/ibmc/ url
- https://www.gov.il/en/Departments/faq/cve_advisories url
- https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0&CVE=CVE-2024-38433 url
- https://github.com/Nuvoton-Israel/bootblock advisory
- https://vuldb.com/?id.271148 url