CVE-2022-36448

CVSS 8.2 HIGHEPSS 0.3%CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Sep 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

n/a · n/a

References

https://binarly.io/advisories/BRLY-2022-023/index.html https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022032