Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Phoenixtech

First CVE: Nov 15, 2023Active for: 3 yearsTotal CVEs: 8

Phoenixtech maintains a narrowly scoped product line centered on firmware and system-level utilities such as SecureCore Technology and WinFlash, which occupy a specialized but notably represented position in the firmware and BIOS management landscape. The vendor's recurring vulnerability patterns cluster around low-level input handling and access control, including buffer overflows, insufficient validation of exceptional conditions, and improper IOCTL access restrictions—weakness classes typical of firmware and privileged system software where memory safety and permission boundaries are critical. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
8
Total CVEs
More Total CVEs than 90% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 76% of tracked vendors
6.0
Avg CVSS Score
Higher Avg CVSS Score than 29% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Phoenixtech over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 15, 2023
2 years ago
Most Recent CVE
May 13, 2025
437 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (8 CVEs).

8 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-0762HIGH
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: f
May 14, 20247.826NONO
CVE-2023-5058HIGH
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or a
Dec 7, 20237.825NONO
CVE-2024-1598HIGH
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 befo
May 14, 20247.822NONO
CVE-2023-35841HIGH
Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects
May 14, 20247.822NONO
CVE-2023-31100HIGH
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4
Nov 15, 20237.119NONO
CVE-2024-12533LOW
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: fro
May 13, 20253.314NONO
CVE-2024-29980LOW
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for In
Jan 14, 20253.312NONO
CVE-2024-29979LOW
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for In
Jan 14, 20253.312NONO
View all 8 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products8 CVEs
38%
63%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowHigh
Attack Vector
Local8 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low8 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (8 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Phoenixtech.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Phoenixtech — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Phoenixtech's Products

View all 1 CNAs →

Top CWEs