Lucene search
MitreCVELIST:CVE-2022-32475HistoryFeb 15, 2023 - 12:00 a.m.
CVE-2022-32475
2023-02-1500:00:00
mitre
www.cve.org
insydeh2o
firmware
smram
privilege escalation
toctou
race-condition
dma attacks
0.0004 Low
EPSS
Percentile
9.2%
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This issue was fixed in the kernel, which also protected chipset and OEM chipset code.
Related
cve
cve
CVE-2022-32475
2023-02-15 14:15:11
nessus
nessus
Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32475)
2023-09-26 00:00:00
nvd
nvd
CVE-2022-32475
2023-02-15 14:15:11
prion
prion
Race condition
2023-02-15 14:15:00
ics
ics
Siemens RUGGEDCOM APE1808 Product Family
2023-03-21 12:00:00
Siemens RUGGEDCOM APE1808 Product Family
2023-09-14 12:00:00