CVE-2023-5058

Description

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://phoenixtech.com/phoenix-security-notifications/cve-2023-5058/ ↗
• https://www.kb.cert.org/vuls/id/811862 ↗
• https://www.phoenix.com/security-notifications/ ↗
• https://www.phoenix.com/security-notifications/cve-2023-5058/ ↗