CVE-2023-31100: Phoenixtech Securecore Technology

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.217 * from 4.5.0.0 before 4.5.0.138

Affected products

• Phoenixtech Securecore Technology: from 4.3.0.0, before 4.3.0.203 (fixed in 4.3.0.203); from 4.3.1.0, before 4.3.1.163 (fixed in 4.3.1.163); from 4.4.0.0, before 4.4.0.217 (fixed in 4.4.0.217); from 4.5.0.0, before 4.5.0.138 (fixed in 4.5.0.138)

Published 2023-11-15. Last modified 2026-06-17.