Phoenix SecureCore UEFI Variable Handling Vulnerability on Intel Processors
Vulnerability
A vulnerability exists in Phoenix SecureCore firmware for Intel Kaby Lake, Coffee Lake, Comet Lake, and Ice Lake processors. This vulnerability involves improper handling of UEFI variables, allowing for input data manipulation that could lead to unsafe memory access and a temporary denial-of-service condition.
Impact
Exploitation of this vulnerability could cause unsafe memory access, potentially leading to a temporary denial-of-service condition.
Remediation
Users are advised to update their firmware to the latest version and contact their hardware vendor to prevent potential exploitation of this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
1.4remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
