Vulnerability index

Browse CVEs

99 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Insydeh2o HIGH 7.8
CVE-2022-34325

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through…

Fix: 05.27.23 / 05.36.23+
Fix from $1,950 2022-11-14
Kernel MEDIUM 6.4
CVE-2022-33982

DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to cor…

Fix: 5.2.05.27.23 / 5.3.05.36.23+
Fix from $1,600 2022-11-14
Kernel MEDIUM 6.4
CVE-2022-33907

DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption thro…

Fix: 5.2.05.27.25 / 5.3.05.36.25+
Fix from $1,600 2022-11-14
Kernel MEDIUM 6.4
CVE-2022-30773

DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they ar…

Fix: 5.4.05.44.23 / 5.5.05.52.23+
Fix from $1,600 2022-11-14
Kernel MEDIUM 6.4
CVE-2022-32266

DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and …

Fix: 5.3.05.36.23 / 5.4.05.44.23+
Fix from $1,600 2022-11-14
Insydeh2o HIGH 8.2
CVE-2022-36448

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler …

Fix: 05.44.30 / 05.52.30+
Fix from $1,950 2022-09-28
Insydeh2o HIGH 8.2
CVE-2022-35893

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver a…

Fix: 05.09.37 / 05.17.37+
Fix from $1,950 2022-09-23
Insydeh2o HIGH 8.2
CVE-2022-36338

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating S…

Fix: after 5.5
Fix from $1,950 2022-09-23
Insydeh2o MEDIUM 6.0
CVE-2022-35894

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer a…

Fix: 05.09.37 / 5.17.37+
Fix from $1,600 2022-09-22
Insydeh2o HIGH 8.2
CVE-2022-35408

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads …

Fix: 05.09.38 / 5.17.38+
Fix from $1,950 2022-09-22
Insydeh2o MEDIUM 6.0
CVE-2022-35896

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRA…

Fix: after 5.5
Fix from $1,600 2022-09-22
Insydeh2o HIGH 8.2
CVE-2022-35895

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for…

Fix: 05.09.37 / 05.17.37+
Fix from $1,950 2022-09-21
Insydeh2o HIGH 8.2
CVE-2021-41837

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM …

Fix: 5.08.41 / 5.16.41+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-41838

An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access …

Fix: 5.16.42 / 5.26.42+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-41839

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes S…

Fix: 5.16.25 / 5.26.25+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-41840

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access…

Fix: 5.23.35 / 5.32.35+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-41841

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access th…

Fix: 5.08.29 / 5.16.29+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-42060

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 befo…

Fix: 05.08.49 / 5.16.42+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-42113

An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 …

Fix: 5.14.34 / 5.24.34+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-42554

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 befor…

Fix: 5.08.42 / 5.16.42+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-43323

An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26…

Fix: 5.08.45 / 5.16.45+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-43615

An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.4…

Fix: 5.16.23 / 5.23.22+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2022-24031

An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker t…

Fix: 5.16.42 / 5.26.42+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 7.5
CVE-2022-24030

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to w…

Fix: 5.08.41 / 5.16.41+
Fix from $1,950 2022-02-03
Insydeh2o MEDIUM 6.7
CVE-2021-42059

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.…

Fix: 5.08.41 / 5.16.41+
Fix from $1,600 2022-02-03
Insydeh2o HIGH 8.2
CVE-2021-33627

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.…

Fix: 5.08.29 / 5.16.29+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 7.5
CVE-2021-33625

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EF…

Fix: 5.16.23 / 5.26.23+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 7.5
CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT …

Mitigation only
Fix from $1,950 2022-02-03
Insydeh2o HIGH 8.2
CVE-2022-24069

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35…

Fix: 5.08.29 / 5.16.29+
Fix from $1,950 2022-02-03
Insydeh2o HIGH 7.5
CVE-2021-43522

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurity…

Fix: 5.14.34 / 5.24.34+
Fix from $1,950 2022-02-03