Lucene search
HistorySep 28, 2022 - 4:15 p.m.
CVE-2022-36448
insydeh2o
kernel 5.0-5.5
smm
memory corruption
software smi handler
pnpsmm driver
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
32.6%
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver.
Affected configurations
Node
insydeinsydeh2oRange5.4–05.44.30
Node
insydeinsydeh2oRange5.5–05.52.30
Related
cvelist
cvelist
CVE-2022-36448
2022-09-28 15:50:09
prion
prion
Memory corruption
2022-09-28 16:15:00
nessus
nessus
Siemens InsydeH2O Improper Input Validation (CVE-2022-36448)
2023-09-26 00:00:00
cve
cve
CVE-2022-36448
2022-09-28 16:15:11
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
32.6%
Related for NVD:CVE-2022-36448