Insyde InsydeH2O 05.52.23

CPE Details

Insyde InsydeH2O 05.52.23
05.52.23
2022-11-16
14h20 +00:00
2022-12-01
15h52 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:insyde:insydeh2o:05.52.23:*:*:*:*:*:*:*

Informations

Vendor

insyde

Product

insydeh2o

Version

05.52.23

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-36448 2022-09-28 13h50 +00:00 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver.
8.2
High
CVE-2022-35893 2022-09-23 16h01 +00:00 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.
8.2
High
CVE-2022-35894 2022-09-22 15h07 +00:00 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.
6
Medium
CVE-2022-35408 2022-09-22 13h35 +00:00 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI_BOOT_SERVICES table before the USB SMI handler triggers. (This is not exploitable from code running in the operating system.)
8.2
High
CVE-2022-35895 2022-09-21 18h36 +00:00 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.
8.2
High