CVE-2024-38433
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness
| Assigner | INCD |
| Reserved | 2024-06-16 |
| Published | 2024-07-11 |
| Updated | 2024-08-02 |
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.
| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CWE-305: Authentication Bypass by Primary Weakness
Ferdinand Nölscher of Google's OTS-HS Team
https://www.gov.il/en/Departments/faq/cve_advisories
