CVE-2023-22612

CVSS 8.8 HIGHEPSS 0.2%CWE-787

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 abr 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

n/a · n/a

Referências

https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2023019