The vulnerability of the TrEEConfigDriver driver, a framework for creating UEFI patches for InsydeH2O, allows a malicious actor to conceal malicious activities by manipulating TPM PCR values and masking the device with virtual data in the Platform Configuration Register (PCR) registers.

🗓️ 25 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerability in TrEEConfigDriver within InsydeH2O UEFI patch framework enables attackers to hide activity by tampering Trusted Platform Module values.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2023-30633	19 Oct 202320:15	–	attackerkb
Circl	CVE-2023-30633	20 Oct 202300:34	–	circl
CNNVD	Insyde InsydeH2O Security Breach	19 Oct 202300:00	–	cnnvd
CVE	CVE-2023-30633	19 Oct 202300:00	–	cve
Cvelist	CVE-2023-30633	19 Oct 202300:00	–	cvelist
EUVD	EUVD-2023-34997	3 Oct 202520:07	–	euvd
NVD	CVE-2023-30633	19 Oct 202320:15	–	nvd
OSV	CVE-2023-30633	19 Oct 202320:15	–	osv
Prion	Design/Logic Flaw	19 Oct 202320:15	–	prion
RedhatCVE	CVE-2023-30633	23 May 202506:05	–	redhatcve

Vulners

Node

insyde insydeh2oRange5.3–5.37.17

insyde insydeh2oRange5.4–5.45.17

insyde insydeh2oRange5.5–5.53.17

insyde insydeh2oRange5.6–5.60.17

insyde insydeh2oMatch5.2

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023101162
vuldb	www.vuldb.com/ru/
insyde	www.insyde.com/security-pledge/SA-2023045
insyde	www.insyde.com/security-pledge
web	www.web.nvd.nist.gov/view/vuln/detail

25 Oct 2023 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25.6

CVSS 36.1

EPSS0.00212