CVE-2022-35896

Опубликовано: 22 сент. 2022

Источник: nvd

CVSS3: 6

EPSS Низкий

Описание

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.

Ссылки

https://binarly.io/advisories/BRLY-2022-025/index.html
Exploit
Third Party Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022034
Vendor Advisory
https://binarly.io/advisories/BRLY-2022-025/index.html
Exploit
Third Party Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022034
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.5 (включая)

EPSS

Процентиль: 25%

0.00085

Низкий

6 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-hvm4-7p57-c7mx