Lucene search

CVE-2022-32473

🗓️ 15 Feb 2023 03:10:15Reported by mitreType

An issue in Insyde InsydeH2O with kernel 5.0-5.5 allows DMA attacks, causing TOCTOU race-condition issues leading to SMRAM corruption and privilege escalation

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2022-32473	15 Feb 202300:00	–	vulnrichment
Tenable Nessus	Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32473)	26 Sep 202300:00	–	nessus
Prion	Race condition	15 Feb 202303:15	–	prion
Cvelist	CVE-2022-32473	15 Feb 202300:00	–	cvelist
NVD	CVE-2022-32473	15 Feb 202303:15	–	nvd

Nvd

Node

insyde insydeh2oRange5.0–5.2.05.27.27

insyde insydeh2oRange5.3–5.3.05.36.27

insyde insydeh2oRange5.4–5.4.05.44.27

insyde insydeh2oRange5.5–5.5.05.52.27

Source	Link
insyde	www.insyde.com/security-pledge
insyde	www.insyde.com/security-pledge/SA-2023005

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Feb 2023 03:15Current

7.3High risk

Vulners AI Score7.3

CVSS37

EPSS0.00048

SSVC

CWE-367