Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xqp8-x7jr-ghp9

Опубликовано: 11 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.

EPSS

Процентиль: 48%
0.00253
Низкий

8.4 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.4
nvd
почти 3 года назад

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.

CVSS3: 6.4
fstec
почти 3 года назад

Уязвимость компонента IhisiSmm фреймворка для создания UEFI-прошивок InsydeH2O, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 48%
0.00253
Низкий

8.4 High

CVSS3

Дефекты

CWE-787