CVE-2019-18279

Name of the Vulnerable Software and Affected Versions Phoenix SCT WinFlash versions 1.1.12.0 through 1.5.74.0

Description The issue is related to the included drivers in Phoenix SCT WinFlash, which could be used by a malicious Windows application to gain elevated privileges. The adverse impacts are limited to the Windows environment, and there is no known direct impact to the UEFI firmware. This issue was fixed in late June 2019.

Recommendations For Phoenix SCT WinFlash versions 1.1.12.0 through 1.5.74.0, update to a version released after late June 2019 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.