Lucene search
MitreCVE-2023-22612HistoryApr 11, 2023 - 9:15 p.m.
CVE-2023-22612
2023-04-1121:15:17
CWE-787
mitre
web.nvd.nist.gov
27
cve-2023-22612
insyde insydeh2o
kernel 5.0
kernel 5.5
memory corruption
smm
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0
Percentile
5.1%
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.
Affected configurations
Node
insydeinsydeh2oMatch05.0a.11
ORinsydeinsydeh2oMatch05.18.03
ORinsydeinsydeh2oMatch05.28.03
ORinsydeinsydeh2oMatch05.37.03
ORinsydeinsydeh2oMatch05.45.01
ORinsydeinsydeh2oMatch05.53.01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| insyde | insydeh2o | 05.0a.11 | cpe:2.3:a:insyde:insydeh2o:05.0a.11:*:*:*:*:*:*:* |
| insyde | insydeh2o | 05.18.03 | cpe:2.3:a:insyde:insydeh2o:05.18.03:*:*:*:*:*:*:* |
| insyde | insydeh2o | 05.28.03 | cpe:2.3:a:insyde:insydeh2o:05.28.03:*:*:*:*:*:*:* |
| insyde | insydeh2o | 05.37.03 | cpe:2.3:a:insyde:insydeh2o:05.37.03:*:*:*:*:*:*:* |
| insyde | insydeh2o | 05.45.01 | cpe:2.3:a:insyde:insydeh2o:05.45.01:*:*:*:*:*:*:* |
| insyde | insydeh2o | 05.53.01 | cpe:2.3:a:insyde:insydeh2o:05.53.01:*:*:*:*:*:*:* |
Related
nessus
nessus
Siemens InsydeH2O Out-of-bounds Write (CVE-2023-22612)
2023-09-26 00:00:00
nvd
nvd
CVE-2023-22612
2023-04-11 21:15:17
prion
prion
Memory corruption
2023-04-11 21:15:00
cvelist
cvelist
CVE-2023-22612
2023-04-11 00:00:00
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2023-22612