Lucene search
HistorySep 22, 2022 - 6:15 p.m.
CVE-2022-35894
insydeh2o
smi handler
kernel 5.0-5.5
fwblockservicesmm driver
information disclosure
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
20.0%
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.
Affected configurations
Node
insydeinsydeh2oRange5.0–05.09.37
Node
insydeinsydeh2oRange5.1–5.17.37
Node
insydeinsydeh2oRange5.2–05.27.29
Node
insydeinsydeh2oRange5.3–05.36.29
Node
insydeinsydeh2oRange5.4–05.44.29
Node
insydeinsydeh2oRange5.5–05.52.29
Related
cve
cve
CVE-2022-35894
2022-09-22 18:15:10
prion
prion
Information disclosure
2022-09-22 18:15:00
cvelist
cvelist
CVE-2022-35894
2022-09-22 17:07:10
nessus
nessus
ics
ics
Siemens RUGGEDCOM APE1808 Product Family
2023-09-14 12:00:00
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2022-35894