CVE-2020-5955

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges...

CVE-2020-5955

creationtimestamp| type| source ---|---|--- 2021-11-03 06:23:17+00:00| seen| https://t.me/cibsecurity/31687...

CVE-2020-5955

CVE-2020-5955 is a privilege-escalation vulnerability in the InsydeH2O BIOS/firmware stack, specifically in the Int15MicrocodeSmm component of InsydeInsydeH2O on Intel client chipsets. The issue arises from uncontrolled input to the SMI handler in the Int15MicrosoftSmm driver, enabling a caller t...