CVE-2023-22613

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-22613
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/ Not Applicable
https://www.insyde.com/security-pledge Vendor Advisory
https://www.insyde.com/security-pledge/SA-2023023 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:insyde:insydeh2o:05.27.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.36.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.44.45:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.52.45:*:*:*:*:*:*:*
History

14 Aug 2023, 18:21

Type Values Removed Values Added
CPE cpe:2.3:a:insyde:insydeh20:05.27.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.44.45:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.36.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.52.45:*:*:*:*:*:*:*		 cpe:2.3:a:insyde:insydeh2o:05.27.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.52.45:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.36.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:05.44.45:*:*:*:*:*:*:*
First Time Insyde insydeh2o

26 Apr 2023, 14:02

Type Values Removed Values Added
References (MISC) https://www.insyde.com/security-pledge/SA-2023023 - (MISC) https://www.insyde.com/security-pledge/SA-2023023 - Vendor Advisory
References (MISC) https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/ - (MISC) https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/ - Not Applicable
References (MISC) https://www.insyde.com/security-pledge - (MISC) https://www.insyde.com/security-pledge - Vendor Advisory
CPE cpe:2.3:a:insyde:insydeh20:05.52.45:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.36.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.27.37:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh20:05.44.45:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CWE CWE-787
First Time Insyde insydeh20
Insyde

11 Apr 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-11 22:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-22613

Mitre link : CVE-2023-22613

CVE.ORG link : CVE-2023-22613

JSON object : View

Products Affected

insyde

  • insydeh2o
CWE
CWE-787

Out-of-bounds Write