Lucene search
PRIOn knowledge basePRION:CVE-2020-5953HistoryFeb 03, 2022 - 1:15 a.m.
Code injection
2022-02-0301:15:00
PRIOn knowledge base
www.prio-n.com
4
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).
| CPE | Name | Operator | Version |
|---|---|---|---|
| insydeh2o | eq | 5.34.03.0029 | |
| insydeh2o | eq | 5.23.45.0023 | |
| insydeh2o | eq | 5.23.04.0045 | |
| insydeh2o | eq | 5.42.03.0010 | |
| insydeh2o | eq | 5.33.15.0034 | |
| insydeh2o | eq | 5.12.09.0074 |
Related
cve
cve
CVE-2020-5953
2022-02-03 01:15:07
cvelist
cvelist
CVE-2020-5953
2022-02-03 01:00:57
cnvd
cnvd
Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10288)
2022-02-08 00:00:00
nessus
nessus
Siemens InsydeH2O SMM Privilege Escalation (CVE-2020-5953)
2023-09-26 00:00:00
nvd
nvd
CVE-2020-5953
2022-02-03 01:15:07
f5
f5
K45810018 : Multiple Insyde BIOS/EFI vulnerabilities
2022-02-15 00:00:00
cert
cert
InsydeH2O UEFI software impacted by multiple vulnerabilities in SMM
2022-02-01 00:00:00