CVE Feed

    Dashboard / CVE / CVE-2024-1598

    CVE-2024-1598

    Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

    Published:May 14, 2024
    Last Modified:Sep 25, 2025
    EPS:May 14, 2024
    EPSS Score:0.00129
    CVSS Score:7.5

    Affected Products

    Vendor
    Intel
    Product
    Celeron N4020
    Vendor
    Phoenix
    Product
    Securecore Technology
    Vendor
    Phoenixtech
    Product
    Securecore Technology

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-22329 (CVSS 2.6) — Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to…
    CVE-2023-25756 (CVSS 4.6) — Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potent…
    CVE-2022-43505 (CVSS 4.1) — Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged …
    CVE-2022-27879 (CVSS 5.3) — Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to …
    CVE-2022-29871 (CVSS 6.7) — Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authent…
    CVE-2022-38102 (CVSS 7.2) — Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versio…
    CVE-2022-30704 (CVSS 7.2) — Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user…
    CVE-2022-38090 (CVSS 6) — Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensio…
    CVE-2022-21198 (CVSS 7.9) — Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privile…
    CVE-2022-21233 (CVSS 5.5) — Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High