CVE-2024-38433

Katalog CVE

CVSS 6.7 · Medium EPSS 0,20%

Kerentanan Authentication Bypass by Primary Weakness pada nuvoton npcm750r firmware, nuvoton npcm710r firmware +2 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.

Rincian

Terbit di NVD

11 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-305: Authentication Bypass by Primary Weakness
CWE-287: Improper Authentication

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.gov.il/en/Departments/faq/cve_advisories advisory pihak ketiga