PT-2021-12478 · Insyde · Insydeh2O

Yngweijw · Published 2021-11-03 · Updated 2022-07-12 · CVE-2020-5955

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: InsydeH2O versions prior to 2021-10-14

Description: An issue was discovered in Int15MicrocodeSmm on Intel client chipsets, allowing a caller to potentially escalate privileges.

Recommendations: For versions prior to 2021-10-14, update to a version released after 2021-10-14 to resolve the issue.

Fix

Related Identifiers

CVE-2020-5955

Affected Products

Insydeh2O

References · 6

• https://insyde.com/security-pledge/SA-2021002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5955 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5955 · Security Note
• https://insyde.com/products · Vendor Advisory
• https://t.me/cibsecurity/31687 · Telegram Post
• https://security.netapp.com/advisory/ntap-20220223-0003 · Note