{"id":"CVE-2024-12533","state":"PUBLISHED","title":"Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: fro","description":"Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67.","publishedAt":"2025-05-13T14:56:41.235Z","updatedAt":"2025-07-28T20:55:52.706Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","source":"Phoenix"},"assigner":"Phoenix","products":["Phoenix SecureCore Technology 4"],"affected":[{"vendor":"Phoenix","product":"SecureCore Technology 4","defaultStatus":"unaffected","versions":[{"version":"4.0.1.0","status":"affected","lessThan":"4.0.1.1018","versionType":"custom"},{"version":"4.1.0.1","status":"affected","lessThan":"4.1.0.573","versionType":"custom"},{"version":"4.2.0.1","status":"affected","lessThan":"4.2.0.338","versionType":"custom"},{"version":"4.2.1.1","status":"affected","lessThan":"4.2.1.300","versionType":"custom"},{"version":"4.3.0.1","status":"affected","lessThan":"4.3.0.244","versionType":"custom"},{"version":"4.3.1.1","status":"affected","lessThan":"4.3.1.187","versionType":"custom"},{"version":"4.4.0.1","status":"affected","lessThan":"4.4.0.299","versionType":"custom"},{"version":"4.5.0.1","status":"affected","lessThan":"4.5.0.231","versionType":"custom"},{"version":"4.5.1.1","status":"affected","lessThan":"4.5.1.103","versionType":"custom"},{"version":"4.5.5.1","status":"affected","lessThan":"4.5.5.36","versionType":"custom"},{"version":"4.6.0.1","status":"affected","lessThan":"4.6.0.67","versionType":"custom"}]}],"references":["https://phoenixtech.com/phoenix-security-notifications/cve-2024-12533/"],"weaknesses":["CWE-754"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/12xxx/CVE-2024-12533.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-12533","state":"PUBLISHED","datePublished":"2025-05-13T14:56:41.235Z","dateUpdated":"2025-07-28T20:55:52.706Z","assignerShortName":"Phoenix","assignerOrgId":"22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de","dateReserved":"2024-12-11T17:37:28.103Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67."}],"affected":[{"vendor":"Phoenix","product":"SecureCore Technology 4","defaultStatus":"unaffected","versions":[{"version":"4.0.1.0","status":"affected","lessThan":"4.0.1.1018","versionType":"custom"},{"version":"4.1.0.1","status":"affected","lessThan":"4.1.0.573","versionType":"custom"},{"version":"4.2.0.1","status":"affected","lessThan":"4.2.0.338","versionType":"custom"},{"version":"4.2.1.1","status":"affected","lessThan":"4.2.1.300","versionType":"custom"},{"version":"4.3.0.1","status":"affected","lessThan":"4.3.0.244","versionType":"custom"},{"version":"4.3.1.1","status":"affected","lessThan":"4.3.1.187","versionType":"custom"},{"version":"4.4.0.1","status":"affected","lessThan":"4.4.0.299","versionType":"custom"},{"version":"4.5.0.1","status":"affected","lessThan":"4.5.0.231","versionType":"custom"},{"version":"4.5.1.1","status":"affected","lessThan":"4.5.1.103","versionType":"custom"},{"version":"4.5.5.1","status":"affected","lessThan":"4.5.5.36","versionType":"custom"},{"version":"4.6.0.1","status":"affected","lessThan":"4.6.0.67","versionType":"custom"}]}],"references":[{"url":"https://phoenixtech.com/phoenix-security-notifications/cve-2024-12533/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-754","description":"CWE-754 Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Phoenix","orgId":"22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de","dateUpdated":"2025-07-28T20:55:52.706Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-13T15:15:02.413134Z","id":"CVE-2024-12533","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-13T15:15:09.100Z"}}]}}}