Lucene search
China National Vulnerability DatabaseCNVD-2022-10280HistoryFeb 08, 2022 - 12:00 a.m.
Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10280)
2022-02-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
0.001 Low
EPSS
Percentile
26.7%
Insyde InsydeH2O is a C source from Insyde Software (Taiwan, China) that implements the new technology “EFI/UEFI” specification, designed to replace the traditional BIOS (Basic Input/Output System). Operating System (H2O) UEFI firmware suffers from a buffer overflow vulnerability that could be exploited to access the UEFI DXE driver and execute arbitrary code.
Related
prion
prion
Stack overflow
2022-02-03 02:15:00
nessus
nessus
Siemens InsydeH2O Stack-Based Buffer Overflow (CVE-2021-42059)
2023-09-26 00:00:00
nvd
nvd
CVE-2021-42059
2022-02-03 02:15:07
cvelist
cvelist
CVE-2021-42059
2022-02-03 01:13:47
cve
cve
CVE-2021-42059
2022-02-03 02:15:07
f5
f5
K45810018 : Multiple Insyde BIOS/EFI vulnerabilities
2022-02-15 00:00:00
cert
cert
InsydeH2O UEFI software impacted by multiple vulnerabilities in SMM
2022-02-01 00:00:00