medium6.7
CVE-2024-38433
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton B…
Impact
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuvoton | Npcm750r Firmware | before 10.10.19 |
| Nuvoton | Npcm710r Firmware | before 10.10.19 |
| Nuvoton | Npcm730r Firmware | before 10.10.19 |
| Nuvoton | Npcm705r Firmware | before 10.10.19 |