CVE-2020-27339

🗓️ 16 Jun 2021 15:49:34Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 86 Views

In Insyde InsydeH2O 5.x kernel, SMM drivers allow corruption of firmware or OS memory through invalid parameter validation. Fixed in versions 05.16.25, 05.26.25, 05.35.25, 05.43.25, 05.51.25

Reporter	Title	Published	Views	Family All 12
Broadcom	BSA-2022-1763	29 Mar 202200:00	–	broadcom
CNNVD	Insyde InsydeH2O 输入验证错误漏洞	16 Jun 202100:00	–	cnnvd
CNVD	Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10035)	6 Jul 202100:00	–	cnvd
Cvelist	CVE-2020-27339	16 Jun 202115:49	–	cvelist
EUVD	EUVD-2020-19852	7 Oct 202500:30	–	euvd
F5 Networks	K45810018: Multiple Insyde BIOS/EFI vulnerabilities	21 Feb 202320:01	–	f5
NVD	CVE-2020-27339	16 Jun 202116:15	–	nvd
OSV	CVE-2020-27339	16 Jun 202116:15	–	osv
Prion	Code injection	16 Jun 202116:15	–	prion
RedhatCVE	CVE-2020-27339	22 May 202515:25	–	redhatcve

NVD

Node

insyde insydeh2oRange5.3–5.34.44

Node

insyde insydeh2oRange5.2–5.25.44

Node

insyde insydeh2oRange5.1–5.16.25

Node

insyde insydeh2oRange5.4–5.42.44

Node

insyde insydeh2oRange5.3–5.35.25

Node

insyde insydeh2oRange5.2–5.26.25

Node

insyde insydeh2oRange5.4–5.43.25

Node

siemens ruggedcom_apr1808_firmwareMatch-

AND

siemens ruggedcom_apr1808Match-

Node

siemens simatic_field_pg_m5_firmwareMatch-

AND

siemens simatic_field_pg_m5Match-

Node

siemens simatic_field_pg_m6_firmwareMatch-

AND

siemens simatic_field_pg_m6Match-

Node

siemens simatic_ipc127e_firmwareMatch-

AND

siemens simatic_ipc127eMatch-

Node

siemens simatic_ipc227g_firmwareMatch-

AND

siemens simatic_ipc227gMatch-

Node

siemens simatic_ipc277g_firmwareMatch-

AND

siemens simatic_ipc277gMatch-

Node

siemens simatic_ipc327g_firmwareMatch-

AND

siemens simatic_ipc327gMatch-

Node

siemens simatic_ipc377g_firmwareMatch-

AND

siemens simatic_ipc377gMatch-

Node

siemens simatic_ipc427e_firmwareMatch-

AND

siemens simatic_ipc427eMatch-

Node

siemens simatic_ipc477e_firmwareMatch-

AND

siemens simatic_ipc477eMatch-

Node

siemens simatic_ipc477e_pro_firmwareMatch-

AND

siemens simatic_ipc477e_proMatch-

Node

siemens simatic_ipc627e_firmwareMatch-

AND

siemens simatic_ipc627eMatch-

Node

siemens simatic_ipc647e_firmwareMatch-

AND

siemens simatic_ipc647eMatch-

Node

siemens simatic_ipc677e_firmwareMatch-

AND

siemens simatic_ipc677eMatch-

Node

siemens simatic_ipc847e_firmwareMatch-

AND

siemens simatic_ipc847eMatch-

Node

siemens simatic_itp1000_firmwareMatch-

AND

siemens simatic_itp1000Match-

Source	Link
security	www.security.netapp.com/advisory/ntap-20220216-0005/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
insyde	www.insyde.com/security-pledge/SA-2021001
kb	www.kb.cert.org/vuls/id/796611

04 Nov 2025 20:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.7

CVSS 27.2

EPSS0.00056

CWE-20