Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hvm4-7p57-c7mx

Опубликовано: 23 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.

EPSS

Процентиль: 25%
0.00085
Низкий

6 Medium

CVSS3

Дефекты

CWE-119
CWE-20

Связанные уязвимости

CVSS3: 6
nvd
больше 3 лет назад

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.

EPSS

Процентиль: 25%
0.00085
Низкий

6 Medium

CVSS3

Дефекты

CWE-119
CWE-20