Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q472-4r55-2p86

Опубликовано: 25 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

EPSS

Процентиль: 31%
0.00118
Низкий

8.2 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.2
nvd
больше 3 лет назад

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

EPSS

Процентиль: 31%
0.00118
Низкий

8.2 High

CVSS3

Дефекты

CWE-20