Design/Logic Flaw

2022-02-0302:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

CPENameOperatorVersion
insydeh2oge5.1
insydeh2olt5.16.23
insydeh2oge5.2
insydeh2olt5.26.23
insydeh2oge5.3
insydeh2olt5.35.23
insydeh2oge5.4
insydeh2olt5.43.22
insydeh2oge5.5
insydeh2olt5.51.22

Name	Operator	Version
insydeh2o	ge	5.1
insydeh2o	lt	5.16.23
insydeh2o	ge	5.2
insydeh2o	lt	5.26.23
insydeh2o	ge	5.3
insydeh2o	lt	5.35.23
insydeh2o	ge	5.4
insydeh2o	lt	5.43.22
insydeh2o	ge	5.5
insydeh2o	lt	5.51.22