CVE-2023-5058: Input Validation

Published Dec 7, 2023

Updated

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.

Affected Software

1 affected component

Phoenixtech Securecore Technology=4.*

Event History

Dec 7, 2023

CVE Published

via MITRE·10:29 PM

Data Sourced

via MITRE·10:29 PM

DescriptionWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5058?

CVE-2023-5058 is considered a high-severity vulnerability due to its potential to allow denial-of-service attacks or arbitrary code execution.

How do I fix CVE-2023-5058?

To fix CVE-2023-5058, upgrade to the latest version of Phoenix SecureCore Technology that addresses this vulnerability.

Who is affected by CVE-2023-5058?

CVE-2023-5058 affects users of Phoenix SecureCore Technology version 4.0 that allows for improper input validation.

What types of attacks can CVE-2023-5058 facilitate?

CVE-2023-5058 can facilitate denial-of-service attacks and potentially allow for arbitrary code execution.

Is there a workaround for CVE-2023-5058?

Currently, the recommended mitigation for CVE-2023-5058 is to apply the available security updates provided by Phoenix.