An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and output data. By modifying the command buffer contents with DMA after the input parameters have been checked but before they are used, the IHISI SMM code may be convinced to modify SMRAM or OS, leading to possible data corruption or escalation of privileges.
References
Link | Resource |
---|---|
https://www.insyde.com/security-pledge | Vendor Advisory |
https://www.insyde.com/security-pledge/SA-2023003 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Feb 2023, 18:17
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.0 |
CWE | CWE-367 | |
First Time |
Insyde insydeh2o
Insyde |
|
CPE | cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:* | |
References | (MISC) https://www.insyde.com/security-pledge/SA-2023003 - Vendor Advisory | |
References | (MISC) https://www.insyde.com/security-pledge - Vendor Advisory |
15 Feb 2023, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-02-15 02:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-32471
Mitre link : CVE-2022-32471
CVE.ORG link : CVE-2022-32471
JSON object : View
Products Affected
insyde
- insydeh2o
CWE
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition