CVE-2024-12533 Other in SecureCore Technology 4
Improper condition checks in Phoenix SecureCore Technology allow input data manipulation, requiring firmware updates to mitigate potential system instability or undefined behavior.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-12533?
CVE-2024-12533 is a low-severity vulnerability in Phoenix SecureCore Technology 4, published on 13 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67.
Weakness: CWE-754
Which versions are affected by CVE-2024-12533?
It affects 1 product.
Products include Phoenixtech Securecore Technology.
How do I fix CVE-2024-12533?
No fix has been published for CVE-2024-12533 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-12533 being exploited?
There is no known exploitation of CVE-2024-12533 in the wild and no public exploit code.
Other vulnerabilities in Phoenix SecureCore Technology 4
- CVE-2023-31100 Missing authorization in SecureCore™ Technology™ 4
- CVE-2023-5058 Other in SecureCore™ Technology™ 4
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables
- CVE-2024-1598 Potential buffer overflow when handling UEFI variables
- CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables
Sources
Also known as GHSA-829j-v57j-p8jf.