Description
An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- insyde / insydeh2o5.1 – 5.16.42
- Siemens / simatic_field_pg_m5_firmware
- Siemens / simatic_field_pg_m6_firmware
- Siemens / simatic_ipc127e_firmware
- Siemens / simatic_ipc227g_firmware
- Siemens / simatic_ipc277g_firmware
- Siemens / simatic_ipc327g_firmware
- Siemens / simatic_ipc377g_firmware
- Siemens / simatic_ipc427e_firmware
- Siemens / simatic_ipc477e_firmware
- Siemens / simatic_ipc627e_firmware
- Siemens / simatic_ipc647e_firmware
- Siemens / simatic_ipc677e_firmware
- Siemens / simatic_ipc847e_firmware
- Siemens / simatic_itp1000_firmware
Updated 16m ago · 8 sources