32 results (0.008 seconds)

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation. Una vulnerabilidad de corrupción de memoria SMM en el controlador SMM (SMRAM write) en CsmInt10HookSmm en Insyde InsydeH2O con kernel 5.0 a 5.5 permite a atacantes enviar datos arbitrarios a SMM, lo que podría conducir a una escalada de privilegios. • https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2023055 • CWE-787: Out-of-bounds Write •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information contained in the 'MeSetup' UEFI variable. On some systems, this variable can be overwritten using operating system APIs. Exploitation of this vulnerability could potentially lead to denial of service for the platform. Se descubrió un problema en Insyde InsydeH2O con kernel 5.0 a 5.5. • https://www.insyde.com/security-pledge/SA-2023036 •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure. • https://www.insyde.com/security-pledge/SA-2023047 • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM. Se descubrió un problema en Insyde InsydeH2O con los kernels 5.0 a 5.5. Debido a una validación de entrada insuficiente, un atacante puede alterar una variable EFI accesible en tiempo de ejecución para provocar que una configuración de BAR dinámica se superponga a SMRAM. • https://www.insyde.com/security-pledge/SA-2023035 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within the command buffer but does not verify that output data does not go beyond the end of the command buffer. In particular, the GetFlashTable function is called directly on the Command Buffer before the DataSize is check, leading to possible circumstances where the data immediately following the command buffer could be destroyed before returning a buffer size error. • https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2023027 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •