CVE-2021-33625

🗓️ 03 Feb 2022 01:55:10Reported by mitreType

Issue in Kernel 5.x in Insyde InsydeH2O affecting HddPassword. Software SMI services do not check buffer address validity, allowing use of SMRAM, MMIO, or OS kernel addresses

Reporter	Title	Published	Views	Family All 12
Broadcom	BSA-2022-1763	29 Mar 202200:00	–	broadcom
CNNVD	Insyde InsydeH2O 缓冲区错误漏洞	2 Feb 202200:00	–	cnnvd
CNVD	Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10287)	8 Feb 202200:00	–	cnvd
Cvelist	CVE-2021-33625	3 Feb 202201:55	–	cvelist
EUVD	EUVD-2021-20302	7 Oct 202500:30	–	euvd
F5 Networks	K45810018: Multiple Insyde BIOS/EFI vulnerabilities	21 Feb 202320:01	–	f5
NVD	CVE-2021-33625	3 Feb 202202:15	–	nvd
OSV	CVE-2021-33625	3 Feb 202202:15	–	osv
Prion	Design/Logic Flaw	3 Feb 202202:15	–	prion
RedhatCVE	CVE-2021-33625	22 May 202521:07	–	redhatcve

NVD

Node

insyde insydeh2oRange5.1–5.16.23

Node

insyde insydeh2oRange5.2–5.26.23

Node

insyde insydeh2oRange5.3–5.35.23

Node

insyde insydeh2oRange5.4–5.43.22

Node

insyde insydeh2oRange5.5–5.51.22

Node

netapp fas/aff_biosMatch-

Node

siemens ruggedcom_ape1808_firmwareMatch-

AND

siemens ruggedcom_ape1808Match-

Node

siemens simatic_field_pg_m5_firmwareMatch-

AND

siemens simatic_field_pg_m5Match-

Node

siemens simatic_ipc127e_firmwareMatch-

AND

siemens simatic_ipc127eMatch-

Node

siemens simatic_itp1000_firmwareMatch-

AND

siemens simatic_itp1000Match-

Node

siemens simatic_ipc277g_firmwareMatch-

AND

siemens simatic_ipc277gMatch-

Node

siemens simatic_ipc227g_firmwareMatch-

AND

siemens simatic_ipc227gMatch-

Node

siemens simatic_ipc327g_firmwareMatch-

AND

siemens simatic_ipc327gMatch-

Node

siemens simatic_ipc377g_firmwareMatch-

AND

siemens simatic_ipc377gMatch-

Node

siemens simatic_ipc427e_firmwareMatch-

AND

siemens simatic_ipc427eMatch-

Node

siemens simatic_ipc477e_firmwareMatch-

AND

siemens simatic_ipc477eMatch-

Node

siemens simatic_ipc477e_pro_firmwareMatch-

AND

siemens simatic_ipc477e_proMatch-

Node

siemens simatic_ipc627e_firmwareMatch-

AND

siemens simatic_ipc627eMatch-

Node

siemens simatic_ipc647e_firmwareMatch-

AND

siemens simatic_ipc647eMatch-

Node

siemens simatic_ipc677e_firmwareMatch-

AND

siemens simatic_ipc677eMatch-

Node

siemens simatic_ipc847e_firmwareMatch-

AND

siemens simatic_ipc847eMatch-

Node

siemens simatic_field_pg_m6_firmwareMatch-

AND

siemens simatic_field_pg_m6Match-

Source	Link
insyde	www.insyde.com/security-pledge
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
insyde	www.insyde.com/security-pledge/SA-2022014
security	www.security.netapp.com/advisory/ntap-20220222-0004/
kb	www.kb.cert.org/vuls/id/796611

04 Nov 2025 20:16Current

7.6High risk

Vulners AI Score7.6

CVSS 26.9

CVSS 3.17.5

EPSS0.00063

CWE-119