CVE-2022-36448

CVSS 8.2 HIGHEPSS 0.3%CWE-20

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 sep 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://binarly.io/advisories/BRLY-2022-023/index.html https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022032