Siemens InsydeH2O SMM Privilege Escalation (CVE-2021-42060)

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode...

CVE-2021-42060

CVE-2021-42060 concerns Insyde InsydeH2O kernel SMM handling. An Int15ServiceSmm SMM callout could hijack execution flow in System Management Mode, enabling privilege escalation to SMM. Affected firmware: InsydeH2O Kernel 5.0–05.08.41, 5.1–05.16.41, 5.2 before 05.23.22, 5.3 before 05.32.22. Remed...

CVE-2021-42060

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode...