An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.
References
| Link | Resource |
|---|---|
| https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/ | Not Applicable |
| https://www.insyde.com/security-pledge | Vendor Advisory |
| https://www.insyde.com/security-pledge/SA-2023019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
14 Aug 2023, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:insyde:insydeh20:05.18.03:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh20:05.0a.11:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh20:05.53.01:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh20:05.45.01:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh20:05.28.03:*:*:*:*:*:*:* |
cpe:2.3:a:insyde:insydeh2o:05.53.01:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:05.37.03:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:05.18.03:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:05.45.01:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:05.0a.11:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:05.28.03:*:*:*:*:*:*:* |
26 Apr 2023, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-11 21:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-22612
Mitre link : CVE-2023-22612
CVE.ORG link : CVE-2023-22612
JSON object : View
Products Affected
insyde
- insydeh2o
CWE
CWE-787
Out-of-bounds Write