CVE-2020-5953

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

PT-2022-20305

Name of the Vulnerable Software and Affected Versions InsydeH2O UEFI firmware Kernel 5.1 versions prior to 05.17.25 InsydeH2O UEFI firmware Kernel 5.2 versions prior to 05.27.25 InsydeH2O UEFI firmware Kernel 5.3 versions prior to 05.36.25 InsydeH2O UEFI firmware Kernel 5.4 versions prior to...

New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface UEFI firmware impacting multiple HP enterprise devices. The shortcomings, which have CVSS scores ranging from 7.5 to 8.8, have been uncovered in...

CVE-2020-5953: Undefined Security Weakness

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...