443 matches found
PT-2024-28644 · Insyde · Insyde Ihisi
Name of the Vulnerable Software and Affected Versions: Insyde IHISI versions prior to kernel 5.2 version 05.29.19 Insyde IHISI versions prior to kernel 5.3 version 05.38.19 Insyde IHISI versions prior to kernel 5.4 version 05.46.19 Insyde IHISI versions prior to kernel 5.5 version 05.54.19 Insyde...
CVE-2024-39707
Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a 0x49 function that can restore the factory default settings of certain UEFI variabl...
CVE-2024-39707
Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...
CVE-2023-28149
A vulnerability exists in the IhisiServiceSmm module within the Insyde InsydeH2O UEFI firmware creation framework. The issue is caused by writing beyond buffer boundaries in memory, which could allow an attacker to modify UEFI variables and escalate privileges remotely. Affected versions include ...
CVE-2023-28149
An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 05.45.39, 5.5 before 05.53.39, and 5.6 before 05.60.39 that could allow an attacker to modify UEFI variables...
Certain HP PC BIOS Logo Vulnerabilities
Potential security vulnerabilities, known as LogoFAIL, have been reported in the AMI BIOS and the Insyde BIOS used in certain HP PC products, which might allow escalation of privilege, arbitrary code execution, denial of service, information disclosure, and/or data tampering. AMI and Insyde are...
Insyde BIOS June 2024 EDK II Reference Vulnerabilities
Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using Insyde BIOS Insyde H20 UEFI Firmware, which might allow arbitrary code execution. Inysde has released updates to mitigate the potential vulnerabilities. Insyde has released updates to mitigate the...
CVE-2024-33228
An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33228
The Insyde Software Corp SEG Windows Driver (version v100.00.07.02 ) is vulnerable due to a flaw in the segwindrvx64.sys component. Attackers can exploit this by sending crafted IOCTL requests to achieve privilege escalation and arbitrary code execution . As a mitigation, it is recommended to dis...
CVE-2024-33228
An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
PT-2024-25164 · Insyde · Seg Windows Driver
Name of the Vulnerable Software and Affected Versions: Insyde Software Corp SEG Windows Driver version 100.00.07.02 Description: An issue in the component segwindrvx64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For...
CVE-2024-33228: Improper Control of Generation of Code
An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
Insyde Software Corp SEG Windows Driver 安全漏洞
Insyde Software Corp SEG Windows Driver is a driver for managing and processing system events from Insyde Software Corp China. A security vulnerability exists in Insyde Software Corp SEG Windows Driver version v100.00.07.02, which originates from a security flaw in the component segwindrvx64.sys...
CVE-2024-25079
A memory corruption vulnerability exists in the HddPassword component of Insyde InsydeH2O firmware. This flaw, identified as CWE-763 (Release of Invalid Pointer or Reference), allows for escalating privileges in SMM . The affected versions include kernels 5.2 (before 05.29.09), 5.3 (before 05.38....
PT-2024-20729 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions prior to kernel 5.2: IB19130163 in 05.29.07 Insyde InsydeH2O versions prior to kernel 5.3: IB19130163 in 05.38.07 Insyde InsydeH2O versions prior to kernel 5.4: IB19130163 in 05.46.07 Insyde InsydeH2O versions prior ...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a C source from Insyde Corporation, Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a memory corruption vulnerability...
PT-2024-20730 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 5.2 before 05.29.09 Insyde InsydeH2O kernel versions 5.3 through 5.3 before 05.38.09 Insyde InsydeH2O kernel versions 5.4 through 5.4 before 05.46.09 Insyde InsydeH2O kernel versions 5.5 through 5....
CVE-2024-27353: Untrusted Pointer Dereference
A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM...
CVE-2022-46897
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...