CVE-2022-35896

CVSS 6 MEDIUMEPSS 0.3%CWE-20

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 set 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Produtos afetados

n/a · n/a

Referências

https://binarly.io/advisories/BRLY-2022-025/index.html https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022034