Input Data Manipulation Vulnerability in Phoenix SecureCore Technology
CVE-2024-12533

3.3LOW

Key Information:

Vendor

Phoenix

Status
Securecore Technology 4
Vendor
CVE Published:
13 May 2025

What is CVE-2024-12533?

The vulnerability in Phoenix SecureCore Technology arises from improper handling of input data, permitting potential malicious manipulation of system behavior. This affects various product versions, allowing unauthorized users to exploit the flaw and possibly gain control over the system, posing serious security risks. Users of the affected versions are highly encouraged to promptly update to mitigate these risks.

Affected Version(s)

SecureCore Technology 4 4.0.1.0 < 4.0.1.1018

SecureCore Technology 4 4.1.0.1 < 4.1.0.573

SecureCore Technology 4 4.2.0.1 < 4.2.0.338

References

https://www.phoenix.com/security-notifications/cve-2024-1...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.