Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:37:51 +0000 CVE-2024-38433 — Nuvoton - CWE-305: Authentication Bypass by Primary Weakness https://cve.radiocsirt.org/vuln/cve-2024-38433 <p><strong>Affected:</strong> Nuvoton NPCM7xx (Poleg) BootBlock, nuvoton npcm7xx_firmware</p> <p>Nuvoton - CWE-305: Authentication Bypass by Primary Weakness</p> <p>An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock</p> <p>reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code</p> <p>execution.</p> <p><strong>Affected:</strong> Nuvoton NPCM7xx (Poleg) BootBlock, nuvoton npcm7xx_firmware</p> <p>Nuvoton - CWE-305: Authentication Bypass by Primary Weakness</p> <p>An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock</p> <p>reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code</p> <p>execution.</p> https://cve.radiocsirt.org/vuln/cve-2024-38433