Lucene search

[email protected]CVE-2023-39281

HistoryNov 01, 2023 - 10:15 p.m.

CVE-2023-39281

2023-11-0122:15:08

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-39281

asfsecurebootdxe

insyde insydeh2o

kernel 5.0

kernel 5.5

buffer overflow

arbitrary code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.

Affected configurations

NVD

Node

intelb760Match-

intelc262Match-

intelc266Match-

intelcore_i3-1305uMatch-

intelcore_i3-13100Match-

intelcore_i3-13100eMatch-

intelcore_i3-13100fMatch-

intelcore_i3-13100tMatch-

intelcore_i3-13100teMatch-

intelcore_i3-1315uMatch-

intelcore_i3-1315ueMatch-

intelcore_i3-1315ureMatch-

intelcore_i3-1320peMatch-

intelcore_i3-1320preMatch-

intelcore_i3-13300heMatch-

intelcore_i3-13300hreMatch-

intelcore_i5-1334uMatch-

intelcore_i5-1335uMatch-

intelcore_i5-1335ueMatch-

intelcore_i5-13400Match-

intelcore_i5-13400eMatch-

intelcore_i5-13400fMatch-

intelcore_i5-13400tMatch-

intelcore_i5-1340pMatch-

intelcore_i5-1340peMatch-

intelcore_i5-13420hMatch-

intelcore_i5-13450hxMatch-

intelcore_i5-1345uMatch-

intelcore_i5-1345ueMatch-

intelcore_i5-1345ureMatch-

intelcore_i5-13500Match-

intelcore_i5-13500eMatch-

intelcore_i5-13500hMatch-

intelcore_i5-13500hxMatch-

intelcore_i5-13500tMatch-

intelcore_i5-13500teMatch-

intelcore_i5-13505hMatch-

intelcore_i5-1350pMatch-

intelcore_i5-1350peMatch-

intelcore_i5-1350preMatch-

intelcore_i5-13600Match-

intelcore_i5-13600hMatch-

intelcore_i5-13600heMatch-

intelcore_i5-13600hreMatch-

intelcore_i5-13600hxMatch-

intelcore_i5-13600kMatch-

intelcore_i5-13600kfMatch-

intelcore_i5-13600tMatch-

intelcore_i5_14600kMatch-

intelcore_i5_14600kfMatch-

intelcore_i7-1355uMatch-

intelcore_i7-1360pMatch-

intelcore_i7-13620hMatch-

intelcore_i7-13650hxMatch-

intelcore_i7-1365uMatch-

intelcore_i7-1365ueMatch-

intelcore_i7-1365ureMatch-

intelcore_i7-1366ureMatch-

intelcore_i7-13700Match-

intelcore_i7-13700eMatch-

intelcore_i7-13700fMatch-

intelcore_i7-13700hMatch-

intelcore_i7-13700hxMatch-

intelcore_i7-13700kMatch-

intelcore_i7-13700kfMatch-

intelcore_i7-13700tMatch-

intelcore_i7-13700teMatch-

intelcore_i7-13705hMatch-

intelcore_i7-1370pMatch-

intelcore_i7-1370peMatch-

intelcore_i7-1370preMatch-

intelcore_i7-1375preMatch-

intelcore_i7-13800hMatch-

intelcore_i7-13800heMatch-

intelcore_i7-13800hreMatch-

intelcore_i7-13850hxMatch-

intelcore_i7_14700kMatch-

intelcore_i7_14700kfMatch-

intelcore_i9-13900Match-

intelcore_i9-13900eMatch-

intelcore_i9-13900fMatch-

intelcore_i9-13900hMatch-

intelcore_i9-13900hkMatch-

intelcore_i9-13900hxMatch-

intelcore_i9-13900kMatch-

intelcore_i9-13900kfMatch-

intelcore_i9-13900ksMatch-

intelcore_i9-13900tMatch-

intelcore_i9-13900teMatch-

intelcore_i9-13905hMatch-

intelcore_i9-13950hxMatch-

intelcore_i9-13980hxMatch-

intelcore_i9-14900kMatch-

intelcore_i9-14900kfMatch-

intelh770Match-

intelhm770Match-

intelu300Match-

intelu300eMatch-

intelwm790Match-

intelz790Match-

AND

insydeinsydeh2oMatch05.45.24.0039

Node

intelatom_x7211eMatch-

intelatom_x7213eMatch-

intelatom_x7425eMatch-

intelcore_i3-n300Match-

intelcore_i3-n305Match-

inteln100Match-

inteln200Match-

inteln50Match-

inteln95Match-

inteln97Match-

AND

insydeinsydeh2oMatch05.44.45.0017

Node

intelceleron_7300Match-

intelceleron_7305Match-

intelceleron_g6900Match-

intelceleron_g6900tMatch-

intelcore_i3-12100Match-

intelcore_i3-12100fMatch-

intelcore_i3-12100tMatch-

intelcore_i3-1210uMatch-

intelcore_i3-1215uMatch-

intelcore_i3-1220pMatch-

intelcore_i3-12300Match-

intelcore_i3-12300tMatch-

intelcore_i5-1230uMatch-

intelcore_i5-1235uMatch-

intelcore_i5-12400Match-

intelcore_i5-12400fMatch-

intelcore_i5-12400tMatch-

intelcore_i5-1240pMatch-

intelcore_i5-1240uMatch-

intelcore_i5-12450hMatch-

intelcore_i5-12450hxMatch-

intelcore_i5-1245uMatch-

intelcore_i5-12490fMatch-

intelcore_i5-12500Match-

intelcore_i5-12500hMatch-

intelcore_i5-12500tMatch-

intelcore_i5-1250pMatch-

intelcore_i5-12600Match-

intelcore_i5-12600hMatch-

intelcore_i5-12600hxMatch-

intelcore_i5-12600kMatch-

intelcore_i5-12600kfMatch-

intelcore_i5-12600tMatch-

intelcore_i7-1250uMatch-

intelcore_i7-1255uMatch-

intelcore_i7-1260pMatch-

intelcore_i7-1260uMatch-

intelcore_i7-12650hMatch-

intelcore_i7-12650hxMatch-

intelcore_i7-1265uMatch-

intelcore_i7-12700Match-

intelcore_i7-12700fMatch-

intelcore_i7-12700hMatch-

intelcore_i7-12700kMatch-

intelcore_i7-12700kfMatch-

intelcore_i7-12700tMatch-

intelcore_i7-1270pMatch-

intelcore_i7-12800hMatch-

intelcore_i7-12800hxMatch-

intelcore_i7-1280pMatch-

intelcore_i7-12850hxMatch-

intelcore_i9-12900Match-

intelcore_i9-12900fMatch-

intelcore_i9-12900hMatch-

intelcore_i9-12900hkMatch-

intelcore_i9-12900hxMatch-

intelcore_i9-12900kMatch-

intelcore_i9-12900kfMatch-

intelcore_i9-12900ksMatch-

intelcore_i9-12900tMatch-

intelcore_i9-12950hxMatch-

intelpentium_8500Match-

intelpentium_8505Match-

intelpentium_gold_g7400Match-

intelpentium_gold_g7400tMatch-

AND

insydeinsydeh2oMatch05.44.34.0055

Node

amdryzen_3_7335uMatch-

amdryzen_3_7440uMatch-

amdryzen_5_6600hMatch-

amdryzen_5_6600hsMatch-

amdryzen_5_6600uMatch-

amdryzen_5_7535hsMatch-

amdryzen_5_7535uMatch-

amdryzen_5_7540uMatch-

amdryzen_5_7545uMatch-

amdryzen_5_7640hMatch-

amdryzen_5_7640uMatch-

amdryzen_5_pro_7640hsMatch-

amdryzen_7_6800hMatch-

amdryzen_7_6800hsMatch-

amdryzen_7_6800uMatch-

amdryzen_7_7735hsMatch-

amdryzen_7_7735uMatch-

amdryzen_7_7736uMatch-

amdryzen_7_7840hMatch-

amdryzen_7_7840uMatch-

amdryzen_7_pro_7840hsMatch-

amdryzen_9_6900hsMatch-

amdryzen_9_6900hxMatch-

amdryzen_9_6980hsMatch-

amdryzen_9_6980hxMatch-

amdryzen_9_7940hMatch-

amdryzen_9_7940hsMatch-

amdryzen_9_pro_7940hsMatch-

amdryzen_z1Match-

amdryzen_z1_extremeMatch-

amdv314Match-

amdv3c16Match-

amdv3c18Match-

amdv3c44Match-

amdv3c48Match-

AND

insydeinsydeh2oMatch05.53.28.0013

Node

intelceleron_7305lMatch-

intelcore_i3-1215ulMatch-

intelcore_i3-12300hlMatch-

intelcore_i5-1235ulMatch-

intelcore_i5-1245ulMatch-

intelcore_i5-12500hlMatch-

intelcore_i5-12600hlMatch-

intelcore_i7-1255ulMatch-

intelcore_i7-1265ulMatch-

intelcore_i7-12700hlMatch-

intelcore_i7-12800hlMatch-

AND

insydeinsydeh2oMatch05.45.38.0005

Node

amdryzen_7_7645hxMatch-

amdryzen_7_7745hxMatch-

amdryzen_7_7840hxMatch-

amdryzen_9_7645hx3dMatch-

amdryzen_9_7845hxMatch-

amdryzen_9_7940hxMatch-

amdryzen_9_7945hxMatch-

AND

insydeinsydeh2oMatch05.53.23.0011

Node

amdathlon_gold_7220uMatch-

amdathlon_silver_7120uMatch-

amdryzen_3_7320uMatch-

amdryzen_5_7520uMatch-

AND

insydeinsydeh2oMatch05.53.23.0014

Node

amdryzen_5_7500fMatch-

amdryzen_5_7600Match-

amdryzen_5_7600xMatch-

amdryzen_5_pro_7645Match-

amdryzen_7_7700Match-

amdryzen_7_7700xMatch-

amdryzen_7_7800x3dMatch-

amdryzen_7_pro_7745Match-

amdryzen_9_7900Match-

amdryzen_9_7900xMatch-

amdryzen_9_7900x3dMatch-

amdryzen_9_7950xMatch-

amdryzen_9_7950x3dMatch-

amdryzen_9_pro_7945Match-

AND

insydeinsydeh2oMatch05.53.22.0008

Node

insydeinsydeh2oMatch05.44.30.0022

AND

amdryzen_3_7335uMatch-

amdryzen_5_6600hMatch-

amdryzen_5_6600hsMatch-

amdryzen_5_6600uMatch-

amdryzen_5_7535hsMatch-

amdryzen_5_7535uMatch-

amdryzen_7_6800hMatch-

amdryzen_7_6800hsMatch-

amdryzen_7_6800uMatch-

amdryzen_7_7735hsMatch-

amdryzen_7_7735uMatch-

amdryzen_7_7736uMatch-

amdryzen_9_6900hsMatch-

amdryzen_9_6900hxMatch-

amdryzen_9_6980hsMatch-

amdryzen_9_6980hxMatch-

Node

insydeinsydeh2oMatch05.43.06.0021

AND

amdvan_gogh_0405Match-

Node

insydeinsydeh2oMatch05.42.37.0031

AND

amdryzen_3_5100Match-

amdryzen_3_5125cMatch-

amdryzen_3_5300gMatch-

amdryzen_3_5300geMatch-

amdryzen_3_5400uMatch-

amdryzen_3_5425uMatch-

amdryzen_3_pro_7330uMatch-

amdryzen_5_5500Match-

amdryzen_5_5500hMatch-

amdryzen_5_5500uMatch-

amdryzen_5_5560uMatch-

amdryzen_5_5600gMatch-

amdryzen_5_5600geMatch-

amdryzen_5_5600hMatch-

amdryzen_5_5600hsMatch-

amdryzen_5_5600uMatch-

amdryzen_5_5625uMatch-

amdryzen_5_pro_7530uMatch-

amdryzen_7_5700Match-

amdryzen_7_5700gMatch-

amdryzen_7_5700geMatch-

amdryzen_7_5700uMatch-

amdryzen_7_5800hMatch-

amdryzen_7_5800hsMatch-

amdryzen_7_5800uMatch-

amdryzen_7_5825uMatch-

amdryzen_7_pro_7730uMatch-

amdryzen_9_5900hsMatch-

amdryzen_9_5900hxMatch-

amdryzen_9_5980hsMatch-

amdryzen3_5300uMatch-

CPENameOperatorVersion
insyde:insydeh2oinsyde insydeh2oeq05.45.24.0039

CPE	Name	Operator	Version
insyde:insydeh2o	insyde insydeh2o	eq	05.45.24.0039

References

www.insyde.com/security-pledge

www.insyde.com/security-pledge/SA-2023054

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

Related for CVE-2023-39281

nvd1 cvelist1 prion1