CVE-2020-5953

🗓️ 03 Feb 2022 01:00:57Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 90 Views

A vulnerability in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware allows code execution in SMM

Reporter	Title	Published	Views	Family All 12
Broadcom	BSA-2022-1763	29 Mar 202200:00	–	broadcom
Circl	CVE-2020-5953	3 Feb 202207:29	–	circl
CNNVD	Insyde InsydeH2O 安全漏洞	2 Feb 202200:00	–	cnnvd
CNVD	Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10288)	8 Feb 202200:00	–	cnvd
Cvelist	CVE-2020-5953	3 Feb 202201:00	–	cvelist
EUVD	EUVD-2020-27107	7 Oct 202500:30	–	euvd
F5 Networks	K45810018: Multiple Insyde BIOS/EFI vulnerabilities	21 Feb 202320:01	–	f5
NVD	CVE-2020-5953	3 Feb 202201:15	–	nvd
Prion	Code injection	3 Feb 202201:15	–	prion
RedhatCVE	CVE-2020-5953	22 May 202517:42	–	redhatcve

NVD

Node

insyde insydeh2oMatch5.12.09.0074

OR

insyde insydeh2oMatch5.23.04.0045

OR

insyde insydeh2oMatch5.23.45.0023

OR

insyde insydeh2oMatch5.33.15.0034

OR

insyde insydeh2oMatch5.34.03.0029

OR

insyde insydeh2oMatch5.42.03.0010

Node

siemens ruggedcom_ape1808_firmwareMatch-

AND

siemens ruggedcom_ape1808Match-

Node

siemens simatic_field_pg_m6_firmwareMatch-

AND

siemens simatic_field_pg_m6Match-

Node

siemens simatic_ipc127e_firmwareMatch-

AND

siemens simatic_ipc127eMatch-

Node

siemens simatic_ipc227g_firmwareMatch-

AND

siemens simatic_ipc227gMatch-

Node

siemens simatic_ipc277g_firmwareMatch-

AND

siemens simatic_ipc277gMatch-

Node

siemens simatic_itp1000_firmwareMatch-

AND

siemens simatic_itp1000Match-

Node

siemens simatic_ipc477e_pro_firmwareMatch-

AND

siemens simatic_ipc477e_proMatch-

Node

siemens simatic_ipc627e_firmwareMatch-

AND

siemens simatic_ipc627eMatch-

Node

siemens simatic_ipc647e_firmwareMatch-

AND

siemens simatic_ipc647eMatch-

Node

siemens simatic_ipc677e_firmwareMatch-

AND

siemens simatic_ipc677eMatch-

Node

siemens simatic_ipc847e_firmwareMatch-

AND

siemens simatic_ipc847eMatch-

Node

siemens simatic_ipc327g_firmwareMatch-

AND

siemens simatic_ipc327gMatch-

Node

siemens simatic_ipc377g_firmwareMatch-

AND

siemens simatic_ipc377gMatch-

Node

siemens simatic_ipc427e_firmwareMatch-

AND

siemens simatic_ipc427eMatch-

Node

siemens simatic_ipc477e_firmwareMatch-

AND

siemens simatic_ipc477eMatch-

Node

siemens simatic_field_pg_m5_firmwareMatch-

AND

siemens simatic_field_pg_m5Match-

Source	Link
security	www.security.netapp.com/advisory/ntap-20220222-0005/
insyde	www.insyde.com/security-pledge
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
insyde	www.insyde.com/products
kb	www.kb.cert.org/vuls/id/796611

04 Nov 2025 20:15Current

7.8High risk

Vulners AI Score7.8

CVSS 26.9

CVSS 3.17.5

EPSS0.00066

vulnerability system management interrupt swsmi handler insydeh2o uefi firmware code execution smm privilege escalation