Lucene search

[email protected]CVE-2023-22615

HistoryApr 11, 2023 - 9:15 p.m.

CVE-2023-22615

2023-04-1121:15:17

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-22615

ihisismm

insyde

insydeh2o

kernel

smram

security issue

nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.

Affected configurations

NVD

Node

insydeinsydeh2oMatch05.37.03

insydeinsydeh2oMatch05.45.01

insydeinsydeh2oMatch05.53.01

CPENameOperatorVersion
insyde:insydeh2oinsyde insydeh2oeq05.37.03
insyde:insydeh2oinsyde insydeh2oeq05.45.01
insyde:insydeh2oinsyde insydeh2oeq05.53.01

CPE	Name	Operator	Version
insyde:insydeh2o	insyde insydeh2o	eq	05.37.03
insyde:insydeh2o	insyde insydeh2o	eq	05.45.01
insyde:insydeh2o	insyde insydeh2o	eq	05.53.01

References

www.insyde.com/security-pledge

www.insyde.com/security-pledge/SA-2023021

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-22615

nvd1 nessus1 prion1 cvelist1