PT-2021-11380 · Insyde · Insydeh2O

Evgenii Rasskazov · Published 2021-06-16 · Updated 2022-07-12 · CVE-2020-27339

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: InsydeH2O versions 5.1 through 5.5

Description: The issue arises from certain SMM drivers in the kernel not correctly validating the CommBuffer and CommBufferSize parameters. This allows callers to potentially corrupt either the firmware or the OS memory.

Recommendations: For InsydeH2O versions 5.1 through 5.5, update the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers to versions 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 respectively.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-27339

Affected Products

Insydeh2O

References · 7

• https://insyde.com/security-pledge/SA-2021001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27339 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27339 · Vendor Advisory
• https://kb.cert.org/vuls/id/796611 · Note
• https://t.me/cibsecurity/34962 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://security.netapp.com/advisory/ntap-20220216-0005 · Note