CVE-2024-38433 in NPCM7xx BootBlock
Riassunto
di MITRE • 11/07/2024
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness
An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock
reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code
execution.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.